CVE-2024-23724: XSS
Published Feb 11, 2024
·Updated
Ghost through 5.76.0 allows stored XSS, and resultant privilege escalation in which a contributor can take over any account, via an SVG profile picture that contains JavaScript code to interact with the API on localhost TCP port 3001. NOTE: The discoverer reports that "The vendor does not view this as a valid vector."
Affected Software
2 affected components
npm/ghost<=5.76.0
Ghost Ghost Node.js<=5.76.0
Remediation
Patch Available
Event History
Feb 11, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Advisory Published
via GitHub·03:30 AM
Frequently Asked Questions
1
What is the severity of CVE-2024-23724?
CVE-2024-23724 has a high severity due to the potential for stored XSS and privilege escalation.
2
How do I fix CVE-2024-23724?
To address CVE-2024-23724, upgrade Ghost to a version later than 5.76.0.
3
What versions of Ghost are affected by CVE-2024-23724?
Ghost versions up to and including 5.76.0 are affected by CVE-2024-23724.
4
What type of attack does CVE-2024-23724 allow?
CVE-2024-23724 allows for stored XSS attacks and potential account takeover.
5
What is the exploit mechanism in CVE-2024-23724?
The exploit mechanism involves using an SVG profile picture that contains JavaScript code.