This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2026-103282 | BDVDB-2026-381982 Detail

TryGhostGhost

Description#

Ghost versions 0.5.0 before 6.23.0 contain a concurrency issue in the staff invitation acceptance mechanism that allows multiple accounts to be created from a single invite token. Attackers can exploit this race condition by submitting concurrent requests with the same invitation token to create duplicate user accounts.

Impact#

Per CVSS v3.1: confidentiality impact none, integrity impact low, availability impact none. Attack vector: network.

Weaknesses#

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.