Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Ghost CMS Theme Path Traversal (CVE-2023-32235) - Vulnerability Database

Ghost CMS Theme Path Traversal (CVE-2023-32235)

Description

The Ghost CMS is vulnerable to a path traversal vulnerability. An unauthenticated attacker can read arbitrary files within the active theme's folder.

Remediation

Upgrade to the latest version of Ghost CMS

References

Path Traversal in Ghost

Related Vulnerabilities

PaperCut NG/MF Path Traversal (CVE-2023-39143) Critical
Common tags: Directory Traversal Known Vulnerabilities
Oracle Business Intelligence Adfresource Path traversal CVE-2019-2588 High
Common tags: Directory Traversal Known Vulnerabilities
Ivanti CSA Path Traversal (CVE-2024-8963/CVE-2024-8190) Critical
Common tags: Directory Traversal Known Vulnerabilities
Openfire Path Traversal (CVE-2023-32315) High
Common tags: Directory Traversal Known Vulnerabilities
FastAdmin Path Traversal (CVE-2024-7928) High
Common tags: Directory Traversal Known Vulnerabilities

Severity

High

Classification

CVE-2023-32235
CWE-22
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Directory Traversal
Known Vulnerabilities