CVE-2026-53945

{
  "id": "CVE-2026-53945",
  "sourceIdentifier": "[email protected]",
  "published": "2026-06-24T19:17:12.090",
  "lastModified": "2026-10-25T22:10:00.150",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Ghost is a Node.js content management system. From 6.0.9 until 6.21.1, Ghost’s private-IP check for outbound HTTP requests could be bypassed via DNS rebinding, allowing an attacker to coerce the Ghost server into reaching hosts on internal networks through features that issue external fetches. This vulnerability is fixed in 6.21.1."
    },
    {
      "lang": "es",
      "value": "Ghost es un sistema de gestión de contenido Node.js. Desde la versión 6.0.9 hasta la 6.21.1, la verificación de IP privada de Ghost para solicitudes HTTP salientes podría ser eludida mediante la reconfiguración de DNS (DNS rebinding), permitiendo a un atacante obligar al servidor Ghost a alcanzar hosts en redes internas a través de funciones que realizan recuperaciones externas. Esta vulnerabilidad está corregida en la versión 6.21.1."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "TryGhost",
          "product": "Ghost",
          "versions": [
            {
              "version": ">= 6.0.9, < 6.21.1",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N",
          "baseScore": 4.0,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "HIGH",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "CHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "LOW",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 2.2,
        "impactScore": 1.4
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-06-25T15:38:04.884131Z",
          "id": "CVE-2026-53945",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-367"
        },
        {
          "lang": "en",
          "value": "CWE-918"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/TryGhost/Ghost/security/advisories/GHSA-ch52-px8q-f22j",
      "source": "[email protected]"
    }
  ]
}