一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月1日

CVE-2026-103285 [MEDIUM] – Ghost versions from 5.19.0 before 6.57.1 contain a cross-site request forgery vulnerabilit

未分类
📑 文章目录

Ghost versions from 5.19.0 before 6.57.1 contain a cross-site request forgery vulnerability in the post feedback functionality that allows attackers to submit feedback on behalf of logged-in users. Attackers can craft a malicious link to the feedback page that automatically submits feedback when visited by authenticated members without their knowledge or consent.