Vulnerability Spotlight: Authentication bypass and enumeration vulnerabilities in Ghost CMS
Cisco Talos discovered two vulnerabilities in Ghost CMS: TALOS-2022-1624 (CVE-2022-41654), an authentication bypass that lets external users update newsletter preferences too liberally, potentially granting full access to create and modify newsletters...