| Gói / sản phẩm | Phiên bản bị ảnh hưởng | Phiên bản đã vá |
|---|---|---|
| ghost | ≥ 5.43.0, < 5.121.0≥ 6.0.0, < 6.15.0 | 5.121.06.15.0 |
| portal | ≥ 2.29.1, < 2.51.5≥ 2.52.0, < 2.57.1 | 2.51.52.57.1 |
| @tryghost/portal | ≥ 2.29.1, < 2.51.5≥ 2.52.0, < 2.57.1 | 2.51.52.57.1 |
| ghost | ≥ 5.43.0, < 5.121.0≥ 6.0.0, < 6.15.0 | 5.121.06.15.0 |
An attacker was able to craft a malicious link that, when accessed by an authenticated staff user or member, would execute JavaScript with the victim's permissions, potentially leading to account takeover.
This vulnerability is present in Ghost versions:
As well as in Portal versions:
Ghost automatically loads the latest patch of the members Portal component via CDN. Therefore:
For Ghost installations using a customised or self-hosted version of Portal, it will be necessary to manually rebuild from or update to the latest patch version.
Ghost thanks Younes Belalia for discovering and disclosing this vulnerability responsibly.
If users have any questions or comments about this advisory, email Ghost at [email protected].
Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.
Quét site miễn phí