CyberRota Analysis
AI-GeneratedA privilege escalation vulnerability exists in the notifications system of Ghost versions prior to 6.56.0, allowing low-privilege staff users to gain unauthorized access to higher-privilege roles. This flaw can be exploited by attackers with minimal access, potentially compromising sensitive operations and data. Organizations using affected Ghost versions should prioritize patching to mitigate the risk of unauthorized privilege escalation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Ghost versions from 2.21.0 before 6.56.0 contain a privilege escalation vulnerability in the notifications system that allows low-privilege staff users to escalate to higher-privilege staff roles. Attackers with low-privilege staff access can exploit the notifications system to gain elevated privileges without proper authorization checks.