Threats tagged 'ghsa-v6q3-xqxm-6f5v'

1 threat

Threats tagged 'ghsa-v6q3-xqxm-6f5v'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.4%	CVE-2026-105675Ghost · Observable Discrepancy High7.5EPSS 0.4%2026-10-05CVE Database V5CVE-2026-105675 A vulnerability in TryGhost Ghost versions 4.39.0 up to 6.64.0 allowed staff users with permission to view staff invites to discover secret tokens of pending invites, including those for roles with higher privileges. This could enable privilege escalation by accepting such invites. The issue is fixed in version 6.64.0. EPSS 0.4%Vulnerability TryGhost #cwe-203 #cwe-943 #ghsa-v6q3-xqxm-6f5v	CVE Database V5	2026-10-05

Showing 1–1 of 1 result