Beveiligingsadvies

CVE-2026-53947

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-24 18:07:42
Laatst bijgewerkt 2026-06-25 17:09:22
Toegewezen door GitHub_M
CVSS-score 5.3
Status PUBLISHED

Beschrijving

Ghost is a Node.js content management system. From 5.18.0 until 6.21.1, a discrepancy in responses from the members signin endpoints made it possible for an unauthenticated attacker to determine whether a given email address belongs to a registered member of a Ghost site. This vulnerability is fixed in 6.21.1.