CVE-2022-28397

Publicada em 12 abr 2022 · Atualizada em 09 jul 2026

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 3.5%

An arbitrary file upload vulnerability in the file upload module of Ghost CMS v4.42.0 allows attackers to execute arbitrary code via a crafted file. NOTE: Vendor states as detailed in Ghost's security documentation, files can only be uploaded and published by trusted users, this is intentional.

Produtos afetados

n/a · n/a

Referências

https://ghost.org/customers/https://ghost.org/docs/security/#privilege-escalation-attacks https://github.com/TryGhost/Ghost https://trends.builtwith.com/cms/Ghost https://youtu.be/PncfBetPk2g