Threats tagged 'ghsa-m382-6jw4-fmp6'

1 threat

Threats tagged 'ghsa-m382-6jw4-fmp6'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.9	EPSS 0.4%	CVE-2026-105676Ghost · Path Traversal Medium4.9EPSS 0.4%2026-10-05CVE Database V5CVE-2026-105676 CVE-2026-105676 is a path traversal vulnerability in TryGhost Ghost affecting versions from 1.20.0 up to but not including 6.64.0. It allows an authenticated Administrator to read JSON files outside the active theme's directory, potentially exposing sensitive server configuration secrets. The issue is fixed in version 6.64.0. EPSS 0.4%Vulnerability TryGhost #cwe-22 #cwe-73 #ghsa-m382-6jw4-fmp6	CVE Database V5	2026-10-05

Showing 1–1 of 1 result