CVE-2021-39192: Ghost CMS Privilege Escalation Vulnerability
Summary
CVE-2021-39192: Privilege escalation: all users can access Admin-level API keys. Affects ghost versions >= 4.0.0, < 4.10.0. Fixed in 4.10.0. How to fix ↓
Also tracked for
- ghost · npm
The same CVE-2021-39192 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Ghost is a popular Node.js content management system (CMS) used for creating and managing websites. It provides a user-friendly interface and various features for content creation and publication. The vulnerability identified as CVE-2021-39192 affects Ghost versions 4.0.0 to 4.9.4. This vulnerability allows all authenticated users, including contributors, to view admin-level API keys through the integrations API endpoint. This can lead to a privilege escalation, enabling unauthorized access to sensitive information and potentially compromising the system's security.
Vulnerability Detail
The vulnerability arises from an error in the implementation of the limits service in Ghost CMS. Due to this flaw, authenticated users can access admin-level API keys via the integrations API endpoint. By obtaining these keys, an attacker can escalate their privileges and gain unauthorized access to sensitive data or perform malicious actions. This vulnerability has a high severity rating (CVSS score: 9.8) and should be addressed promptly to prevent potential exploitation.
How To Fix
Minimum fixed version
4.10.0
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can disable all non-Administrator accounts to prevent API access. This can be done by modifying the user roles and permissions within the Ghost CMS administration panel. However, this workaround should only be considered as a temporary measure until the system can be updated to the patched version.
Conclusion
The privilege escalation vulnerability in Ghost CMS (CVE-2021-39192) poses a significant risk to the security of affected systems. It allows authenticated users to access admin-level API keys, potentially leading to unauthorized access and data compromise. It is crucial to update Ghost CMS to version 4.10.0 or later to mitigate this vulnerability. Regenerating API keys after the update is also recommended. For further assistance or support in addressing this vulnerability, please contact DevNack.com.
See every vulnerability recorded for ghost →
FAQ
Ghost CMS is a Node.js-based content management system used for creating and managing websites. It provides a user-friendly interface and various features for content creation and publication.
This vulnerability allows authenticated users, including contributors, to view admin-level API keys. By obtaining these keys, an attacker can escalate their privileges and gain unauthorized access to sensitive data or perform malicious actions.
To fix this vulnerability, update Ghost CMS to version 4.10.0 or later. Additionally, regenerate all API keys after the update to invalidate any potentially compromised keys.
Yes, as a temporary workaround, you can disable all non-Administrator accounts to prevent API access. However, this should only be considered as a temporary measure until the system can be updated to the patched version.
This vulnerability has a high severity rating with a CVSS score of 9.8.
References
Related vulnerabilities
Recent vulnerabilities recorded for ghost.
