CVE-2022-28397: Arbitrary File Upload in Ghost CMS
Summary
CVE-2022-28397: Arbitrary file upload in Ghost. Affects ghost versions < 4.42.0. No fix is published. How to fix ↓
Also tracked for
- ghost · Bitnami
The same CVE-2022-28397 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Ghost CMS is an open-source content management system designed for creating and managing websites. It provides a user-friendly interface for content creation, editing, and publishing. The file upload module in Ghost CMS allows users to upload files to their websites. However, a vulnerability in Ghost CMS versions up to 4.42.0 allows attackers to upload arbitrary files, which can lead to the execution of arbitrary code on the server.
Vulnerability Detail
The vulnerability (CVE-2022-28397) in Ghost CMS allows attackers to upload malicious files to the server. This can be exploited to execute arbitrary code, potentially leading to remote code execution and full compromise of the affected system. The vulnerability originates from a lack of proper input validation and file type verification in the file upload module. Attackers can craft files with malicious content and bypass the file type checks, allowing them to upload and execute arbitrary code on the server.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
If upgrading to the latest version is not immediately possible, a temporary workaround is to disable file uploads in the Ghost CMS configuration. This can be done by modifying the configuration file to remove or comment out the file upload module configuration. By disabling file uploads, the vulnerability is effectively mitigated until a proper upgrade can be performed.
Conclusion
The vulnerability in Ghost CMS allows attackers to upload arbitrary files and execute arbitrary code on the server. Upgrading to the latest version of Ghost CMS or disabling file uploads can mitigate this vulnerability. It is recommended to take immediate action to patch the vulnerability and prevent potential exploitation. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for ghost →
FAQ
The vulnerability allows attackers to upload arbitrary files and execute arbitrary code on the server. This can lead to remote code execution and full compromise of the affected system.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your Ghost CMS installation is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities, using just the package-lock.json file.
Yes, the CVSS score for this vulnerability is 9.8, indicating a critical severity level.
At the time of this report, there are no known public exploits for this vulnerability. However, it is important to patch the vulnerability as soon as possible to prevent potential exploitation.
You can find more information about this vulnerability in the GitHub Security Advisory (GHSA-ffhq-g856-9f2p) at https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/04/GHSA-ffhq-g856-9f2p/GHSA-ffhq-g856-9f2p.json.
References
Related vulnerabilities
Recent vulnerabilities recorded for ghost.
