GHSA-chgm-3698-jm42: Medium severity npm/ghost vulnerability
Impact
A discrepancy in responses from the members signin endpoints made it possible for an unauthenticated attacker to determine whether a given email address belongs to a registered member of a Ghost site.
Vulnerable versions
This vulnerability is present in Ghost from v5.18.0 up to v6.21.0.
Patches
v6.21.1 contains a fix for this issue.
How to update
For self-hosters using Docker, find Docker's official Ghost image here. Updating a Docker-based Ghost instance is documented here.
If your Ghost is a Ghost-CLI install see our documentation on updating it to the latest version here.
For more information
If you have any questions or comments about this advisory, email Ghost at security@ghost.org.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
npm/ghostto a version that resolves this vulnerability.Fixed in 6.21.2 - Upgrade
Upgrade
Ghostto a version that resolves this vulnerability.Fixed in 6.21.1
Event History
Frequently Asked Questions
What is the severity of GHSA-chgm-3698-jm42?
The severity of GHSA-chgm-3698-jm42 is medium with a score of 5.3.
What type of vulnerability is GHSA-chgm-3698-jm42?
GHSA-chgm-3698-jm42 is an information disclosure vulnerability impacting Ghost sites.
How can I check if my version of Ghost is vulnerable to GHSA-chgm-3698-jm42?
Versions of Ghost from v5.18.0 up to v6.21 are vulnerable to GHSA-chgm-3698-jm42.
How do I fix GHSA-chgm-3698-jm42?
To fix GHSA-chgm-3698-jm42, upgrade to a version of Ghost that is not within the vulnerable range.
What are the potential impacts of GHSA-chgm-3698-jm42?
GHSA-chgm-3698-jm42 allows unauthenticated attackers to discern if an email address belongs to a registered Ghost member.