Ghost CMS Theme Path Traversal (CVE-2023-32235) - Vulnerability Database

Ghost CMS Theme Path Traversal (CVE-2023-32235)

Description

Ghost CMS versions prior to the patched release contain a path traversal vulnerability in the theme rendering functionality. This vulnerability allows unauthenticated remote attackers to read arbitrary files located within the active theme's directory by manipulating file path parameters. The flaw bypasses intended access restrictions, enabling unauthorized access to theme files that may contain sensitive configuration data or source code.

Remediation

Immediately upgrade Ghost CMS to version 5.42.1 or later, which contains the security patch for CVE-2023-32235. Follow these steps:

1. Backup your Ghost installation and database before upgrading
2. Review the Ghost upgrade documentation for your deployment method (CLI, Docker, or managed hosting)
3. For CLI installations, run:

ghost update

4. For Docker deployments, pull the latest image and restart containers
5. After upgrading, verify the version by checking the Ghost admin panel or running:

ghost version

6. Review theme files for any sensitive information that may have been exposed and rotate any credentials or API keys stored in theme files
7. Consider implementing additional access controls or web application firewall (WAF) rules to monitor for path traversal attempts