Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 20:46:55 +0000 BIT-ghost-2023-32235 https://cve.radiocsirt.org/vuln/bit-ghost-2023-32235 <p><strong>Affected:</strong> Bitnami: ghost</p> <p>Ghost before 5.42.1 allows remote attackers to read arbitrary files within the active theme&#39;s folder via /assets/built%2F..%2F..%2F/ directory traversal. This occurs in frontend/web/middleware/static-theme.js.</p> <p><strong>Affected:</strong> Bitnami: ghost</p> <p>Ghost before 5.42.1 allows remote attackers to read arbitrary files within the active theme&#39;s folder via /assets/built%2F..%2F..%2F/ directory traversal. This occurs in frontend/web/middleware/static-theme.js.</p> https://cve.radiocsirt.org/vuln/bit-ghost-2023-32235 cnvd-2025-23129 https://cve.radiocsirt.org/vuln/cnvd-2025-23129 cnvd-2025-23129 https://cve.radiocsirt.org/vuln/cnvd-2025-23129 EUVD-2026-212578 https://cve.radiocsirt.org/vuln/euvd-2026-212578 EUVD-2026-212578 https://cve.radiocsirt.org/vuln/euvd-2026-212578 fkie_cve-2023-32235 https://cve.radiocsirt.org/vuln/fkie_cve-2023-32235 <p>Ghost before 5.42.1 allows remote attackers to read arbitrary files within the active theme&#39;s folder via /assets/built%2F..%2F..%2F/ directory traversal. This occurs in frontend/web/middleware/static-theme.js.</p> <p>Ghost before 5.42.1 allows remote attackers to read arbitrary files within the active theme&#39;s folder via /assets/built%2F..%2F..%2F/ directory traversal. This occurs in frontend/web/middleware/static-theme.js.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-32235 GHSA-wf7x-fh6w-34r6 — Path Traversal in Ghost https://cve.radiocsirt.org/vuln/ghsa-wf7x-fh6w-34r6 <p><strong>Affected:</strong> npm: ghost</p> <p>Ghost before 5.42.1 allows remote attackers to read arbitrary files within the active theme&#39;s folder via /assets/built%2F..%2F..%2F/ directory traversal. This occurs in frontend/web/middleware/static-theme.js.</p> <p><strong>Affected:</strong> npm: ghost</p> <p>Ghost before 5.42.1 allows remote attackers to read arbitrary files within the active theme&#39;s folder via /assets/built%2F..%2F..%2F/ directory traversal. This occurs in frontend/web/middleware/static-theme.js.</p> https://cve.radiocsirt.org/vuln/ghsa-wf7x-fh6w-34r6 gsd-2023-32235 https://cve.radiocsirt.org/vuln/gsd-2023-32235 gsd-2023-32235 https://cve.radiocsirt.org/vuln/gsd-2023-32235