Ghost: Invite Token Disclosure in Ghost Admin API
Ghost is a Node.js content management system. From 4.39.0 until 6.64.0, staff users with permission to view staff invites were able to discover the secret token of pending invites, including invites for roles with higher privileges than their own. This could allow a staff user to escalate their privileges by accepting a pending invite. This issue is fixed in version 6.64.0.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-104416US | high7.5 | — | ||
Ghost from 4.39.0 before 6.64.0 contains an information disclosure vulnerability in the Admin API that allows staff users to view secret tokens of pending staff invites. Staff user… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/105xxx/CVE-2026-105675.jsonADVISORY
- https://github.com/TryGhost/Ghost/commit/4fb587e4d49667f929b87f7d6a873ae5e9cc087fFIX
- https://github.com/TryGhost/Ghost/pull/30760FIX
- https://github.com/TryGhost/Ghost/releases/tag/v6.64.0WEB
- https://github.com/TryGhost/Ghost/security/advisories/GHSA-v6q3-xqxm-6f5vADVISORY
- https://nvd.nist.gov/vuln/detail/CVE-2026-105675ADVISORY
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan