CVE-2022-41654
1 advisory.
npm/ghost CVE-2022-41654: high 8.5, EPSS 18.91%
ghost vulnerable to unauthorized newsletter modification via improper access controls
Action: Upgrade ghost to 4.48.8 or later.
npm i ghost@5.22.7npm i ghost@4.48.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.22.7 | - |
| 4.46.0 | 4.48.8 | - |
Fixed versions
| 5.22.7 | 4.48.8 |
Sources
- osv: GHSA-9gh8-wp53-ccc6
- https://github.com/TryGhost/Ghost/security/advisories/GHSA-9gh8-wp53-ccc6
- https://nvd.nist.gov/vuln/detail/CVE-2022-41654
- https://forum.ghost.org/t/security-update-available-for-ghost-4-48-7-and-5-22-6/34475
- https://github.com/TryGhost/Ghost
- https://talosintelligence.com/vulnerability_reports/TALOS-2022-1624
CVE-2022-41654 · published · modified · JSON