Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ghost CMS Vulnerability Exploit #7

Open
henning410 opened this issue Apr 25, 2023 · 1 comment
Open

Ghost CMS Vulnerability Exploit #7

henning410 opened this issue Apr 25, 2023 · 1 comment

Comments

@henning410
Copy link

In your paper, you mentioned:
"The vulnerability was found and confirmed in the version 1.19.2, but the version from 1.17.x to 1.19.x are also affected. The exploit was made for the version 1.19.2"

I installed ghost with npm install [email protected] -g and ghost install local.
Unfortunately, when I send the payload with Burp Suite, I get the following error:

HTTP/1.1 404 Not Found X-Powered-By: Express Content-Version: v5.44 Vary: Accept-Version, Accept-Encoding Cache-Control: no-cache, private, no-store, must-revalidate, max-stale=0, post-check=0, pre-check=0 Content-Type: application/json; charset=utf-8 Content-Length: 204 ETag: W/"cc-YCoG45/D6BWkqoZEAdMKM3pX01k" Date: Tue, 25 Apr 2023 11:18:21 GMT Connection: close {"errors":[{"message":"Resource not found","context":null,"type":"NotFoundError","details":null,"property":null,"help":null,"code":null,"id":"e361c270-e35a-11ed-bbaa-570fac3ca52d","ghostErrorCode":null}]}

Maybe something is wrong with my ghost version, or I do something wrong with Burp. Can you help me out here?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants
@henning410 and others