Threats tagged 'ghsa-r7f2-6fj8-6fg2'

1 threat

Threats tagged 'ghsa-r7f2-6fj8-6fg2'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.0	EPSS 0.3%	CVE-2026-105648Ghost · Incomplete List of Disallowed Inputs Medium4.0EPSS 0.3%2026-10-05CVE Database V5CVE-2026-105648 A validation issue in TryGhost Ghost versions 6.0.9 through 6.64.0 allowed unauthenticated users to abuse certain functionality, such as Webmentions, to make limited HTTP requests to hosts within the Ghost server's internal network on some network configurations. The attack does not return response data. The vulnerability is fixed in version 6.65.0. EPSS 0.3%Vulnerability TryGhost #cwe-184 #cwe-918 #ghsa-r7f2-6fj8-6fg2	CVE Database V5	2026-10-05

Showing 1–1 of 1 result