CVE-2026-105680

6.5 Moyenne

Publiée le 05/10/2026 à 22:17 · Modifiée le 06/10/2026 à 19:17 · Analyse NVD reportée · Source : security-advisories@github.com

Description

Ghost is a Node.js content management system. From 5.81.0 until 6.60.0, staff with the Author role could delete posts and pages that they did not author. This issue is fixed in version 6.60.0.

Traduire en français

Produits concernés

TryGhost Ghost

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.5 Moyenne	security-advisories@github.com	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H`

Faiblesses (CWE)

CWE-862

Références

https://github.com/TryGhost/Ghost/commit/cf2f718a67faa342c27989b701554ddd63862165
https://github.com/TryGhost/Ghost/issues/30283
https://github.com/TryGhost/Ghost/releases/tag/v6.60.0
https://github.com/TryGhost/Ghost/security/advisories/GHSA-x3mg-q38v-m562

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories