CyberRota Analysis
AI-GeneratedGhost, a Node.js content management system, has an input validation vulnerability affecting versions 6.14.0 to 6.27.0, which could allow staff users to access local files outside designated storage directories. While the severity is rated low, organizations using affected versions should prioritize upgrading to 6.27.0 to mitigate potential unauthorized access to sensitive files. This is particularly relevant for those managing sensitive content or user data within their Ghost installations.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Ghost is a Node.js content management system. From 6.14.0 until 6.27.0, an input validation issue may have allowed staff users to access local files outside the intended data storage directories on the server. This issue is fixed in version 6.27.0.