Description
Ghost是Ghost Foundation推出的开源博客平台，是现代化内容管理的首选平台。该产品采用Node.js开发，专注于写作和发布体验，支持Markdown编辑、多用户协作、主题定制、插件扩展等功能，广泛应用于个人博客、企业官网、在线媒体等场景。Ghost /assets/built 接口存在目录遍历漏洞，攻击者可通过该漏洞读取活动主题文件夹内的任意文件，获取敏感信息。
Ghost CMS /assets/built 目录遍历漏洞（CVE-2023-32235）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-32235
https://www.exploit-db.com/exploits/52408
https://www.sentinelone.com/vulnerability-database/cve-2023-32235/
https://security.snyk.io/vuln/SNYK-JS-GHOST-5497332
https://github.com/TryGhost/Ghost/commit/378dd913aa8d0fd0da29b0ffced8884579598b0f
https://www.acunetix.com/vulnerabilities/web/ghost-cms-theme-path-traversal-cve-2023-32235/
https://www.tenable.com/plugins/nessus/271812