7.5

CVE-2023-31133: ghost

CVSS: 7.5v3.1HighModified
AliasesGHSA-r97q-ghch-82j9BIT-ghost-2023-31133
Published 08-05-2023Last modified 29-01-2025
Open JSON

Vulnerability summary

CVE-2023-31133 is a high (CVSS 7.5) vulnerability in ghost. EPSS estimates a 45.71% chance of exploitation in the next 30 days, higher than 98.7% of scored vulnerabilities.

Overall risk
39/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.5/10
010
High · v3.1 (CVE.org)
EPSS score
45.71%
0%100%
High · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 08-05-2023
    PublishedVulnerability first disclosed.
  2. 29-01-2025
    Last modifiedVulnerability information updated.

Description

Ghost is an app for new-media creators with tools to build a website, publish content, send newsletters, and offer paid subscriptions to members. Prior to version 5.46.1, due to a lack of validation when filtering on the public API endpoints, it is possible to reveal private fields via a brute force attack. Ghost(Pro) has already been patched. Maintainers can find no evidence that the issue was exploited on Ghost(Pro) prior to the patch being added. Self-hosters are impacted if running Ghost a version below v5.46.1. v5.46.1 contains a fix for this issue. As a workaround, add a block for requests to `/ghost/api/content/*` where the `filter` query parameter contains `password` or `email`.

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

45.71%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 45.71% on 20-09-2026

20-09-202620-10-2026
EPSS score
45.71%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ghost1 product
Npm1 product
  • ghost< 5.46.1
Tryghost1 product

3 vendors · 3 products

References

5 links