GitHub Advisoryadvisory · npm

GHSA-99vc-xw8j-phjm Ghost has possible Cross-site Scripting issue

MEDIUM Published 2024-02-11 Modified 2024-09-05 Official page ↗
Aliases
CVE-2024-23724
Ecosystem
npm
Packages
ghost
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Weaknesses
CWE-79
Reviewed
2024-02-12

Affected packages

• npm ghost: <= 5.76.0 (no fix yet) • npm ghost: <= 5.76.0 (no fix yet)

Description

Ghost through 5.76.0 allows stored XSS, and resultant privilege escalation in which a contributor can take over any account, via an SVG profile picture that contains JavaScript code to interact with the API on localhost TCP port 3001. NOTE: The discoverer reports that "The vendor does not view this as a valid vector."

Related

Alias · CVE (1)

  • CVE-2024-23724 Ghost through 5.76.0 allows stored XSS, and resultant privilege escalation in which a contributor can take over any account, via an SVG… vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References