Authentication Bypass Affecting ghost package, versions <0.5.9


Severity

Recommended
0.0
medium
0
10

CVSS assessment made by Snyk's Security Team

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk ID npm:ghost:20150303-4
  • published 30 May 2017
  • disclosed 2 Mar 2015
  • credit Matteo Beccaro

How to fix?

Upgrade ghost to version 0.5.9 or higher.

Overview

ghost is a blogging platform. Affected versions of the package are vulnerable to Authentication Bypass. An authenticated user can spoof an HTTP GET request with any username to access any other users’ drafts. This is due to the user parameter not being validated upon the request.

CVSS Scores

version 3.1
Expand this section

Snyk

Recommended
5.3 medium
  • Attack Vector (AV)
    Network
  • Attack Complexity (AC)
    Low
  • Privileges Required (PR)
    None
  • User Interaction (UI)
    None
  • Scope (S)
    Unchanged
  • Confidentiality (C)
    Low
  • Integrity (I)
    None
  • Availability (A)
    None