Ghost: Authorization Issue Allowed Author Role to Delete any Post
Ghost is a Node.js content management system. From 5.81.0 until 6.60.0, staff with the Author role could delete posts and pages that they did not author. This issue is fixed in version 6.60.0.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-105680US | —OT erhöht | — | ||
Ghost is a Node.js content management system. From 5.81.0 until 6.60.0, staff with the Author role could delete posts and pages that they did not author. This issue is fixed in ver… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/TryGhost/Ghost/commit/cf2f718a67faa342c27989b701554ddd63862165WEB
- https://github.com/TryGhost/Ghost/issues/30283WEB
- https://github.com/TryGhost/Ghost/releases/tag/v6.60.0WEB
- https://github.com/TryGhost/Ghost/security/advisories/GHSA-x3mg-q38v-m562WEB
- https://nvd.nist.gov/vuln/detail/CVE-2026-105680WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan