CVE-2022-41697mediumCWE-204

CVE-2022-41697: medium-severity vulnerability in Ghost

Published · Updated

Follow this CVE+ Monitor Ghost

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

33Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendcvss 5.3epss 20%
In short

Ghost 5.9.4 allows attackers to discover valid user accounts by sending specially-crafted login requests and observing different responses. This lets attackers build a list of real usernames before attempting password attacks.

Technical detail

User enumeration vulnerability in Ghost 5.9.4 login endpoint (CWE-204) permits attackers to distinguish between valid and invalid usernames through differential response analysis. The vulnerability requires only HTTP request capability with no authentication; the impact is information disclosure of registered user identities.

Summary generated and translated by AI from the official description.
A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4. A specially-crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send a series of HTTP requests to trigger this vulnerability.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
Ghost Foundation · Ghost
Related CVEs — Ghost

In the same product, most dangerous first.

CVE-2022-41654CRITICALCVE-2022-41654EPSS 18.9%CVE-2022-47197CRITICALCVE-2022-47197EPSS 1.0%CVE-2022-47194CRITICALCVE-2022-47194EPSS 0.8%CVE-2024-34559HIGHWordPress Ghost plugin <= 1.4.0 - Sensitive Data Exposure via Log File vulnerabilityEPSS 0.7%CVE-2022-47196CRITICALCVE-2022-47196EPSS 0.7%CVE-2022-47195CRITICALCVE-2022-47195EPSS 0.7%