CVE-2023-40028
1 advisory.
npm/ghost CVE-2023-40028: medium 4.9, EPSS 68.95%
Ghost vulnerable to arbitrary file read via symlinks in content import
Action: Upgrade ghost to 5.59.1 or later.
npm i ghost@5.59.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.59.1 | - |
Fixed versions
| 5.59.1 |
Sources
- osv: GHSA-9c9v-w225-v5rg
- https://github.com/TryGhost/Ghost/security/advisories/GHSA-9c9v-w225-v5rg
- https://nvd.nist.gov/vuln/detail/CVE-2023-40028
- https://github.com/TryGhost/Ghost/commit/690fbf3f7302ff3f77159c0795928bdd20f41205
- https://github.com/TryGhost/Ghost
CVE-2023-40028 · published · modified · JSON