npm/ghost CVE-2024-23725: medium 6.1, EPSS 0.44%

Cross-site Scripting in Ghost

Action: Upgrade ghost to 5.76.0 or later.

npm i ghost@5.76.0

Affected

Fixed versions

Sources

• osv: GHSA-fh38-9fgr-454w
• https://nvd.nist.gov/vuln/detail/CVE-2024-23725
• https://github.com/TryGhost/Ghost/pull/17190
• https://github.com/yunaycompany/Ghost/commit/64d67717f7c76c77b3908e15627f473e9ef34002
• https://github.com/TryGhost/Ghost
• https://github.com/TryGhost/Ghost/releases/tag/v5.76.0

CVE-2024-23725 · published 2024-01-21T06:30:22Z · modified 2024-01-30T08:11:39.357026Z · JSON