| Package | Affected versions | Patched versions |
|---|---|---|
| ghost | < 5.59.1 | 5.59.1 |
| ghost | < 5.59.1 | 5.59.1 |
A vulnerability in Ghost allows authenticated users to upload files which are symlinks. This can be exploited to perform an arbitrary file read of any file on the operating system.
Site administrators can check for exploitation of this issue by looking for unknown symlinks within Ghost's content/ folder
This security vulnerability is present in Ghost ≤ v5.59.0.
v5.59.1 contains a fix for this issue.
If you have any questions or comments about this advisory:
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free