Stored XSS and Privilege Escalation Vulnerability in Ghost through 5.76.0
CVE-2024-23724

9CRITICAL

Key Information:

Vendor

Ghost

Status
Ghost
Vendor
CVE Published:
11 February 2024

What is CVE-2024-23724?

The vulnerability allows stored cross-site scripting (XSS) which can lead to privilege escalation. Specifically, users can upload an SVG profile picture that contains embedded JavaScript code, enabling interaction with the API running on localhost TCP port 3001. This security flaw permits a contributor to take over any account within the Ghost platform. There is an assertion from the discoverer that the vendor does not recognize this as a valid attack vector, drawing attention to potential oversight in their threat assessment process.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://rhinosecuritylabs.com/blog/
https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE...
https://github.com/TryGhost/Ghost/pull/19646

EPSS Score

38% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

JSON
.