CVE-2026-103280: TryGhost Ghost, изтичане на данни

Описание

Оригинално описание

Ghost from version 0.8.0 before 6.23.0 contains an information disclosure vulnerability in its setup endpoint: the endpoint responds to unauthenticated requests with the site owner's email address, allowing any remote visitor to obtain it.

Засегнати продукти

• TryGhost Ghost: 0.8.0 преди 6.23.0; 6.23.0

Вид слабост

• CWE-201 Вмъкване на чувствителна информация в изпращаните данни

История

Други уязвимости в TryGhost Ghost

• 3.8CVE-2026-105683
• 2.7CVE-2026-105682
• 6.5CVE-2026-105681
• 6.5CVE-2026-105680
• 7.3CVE-2026-105679

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-103280
• https://nvd.nist.gov/vuln/detail/CVE-2026-103280
• https://github.com/TryGhost/Ghost/security/advisories/GHSA-5685-hwm9-62cg
• https://www.vulncheck.com/advisories/ghost-0.8.0-before-6.23.0-information-disclosure-via-setup-endpoint