Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2025-9862

Ghost 6.0.6 - SSRF via oEmbed Bookmark

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Fluid Attacks

Description

Server-Side Request Forgery (SSRF) vulnerability in Ghost allows an attacker to access internal resources.This issue affects Ghost: from 6.0.0 through 6.0.8, from 5.99.0 through 5.130.3.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ghost Ghost

Default version status: unaffected

  • 6.0.0 to ≤ 6.0.8affected
  • 5.99.0 to ≤ 5.130.3affected

References