CVE-2022-41697

5.3

CVSSmedium

Exploitable remotely over the internet · no authentication required.

Description

A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4. A specially-crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send a series of HTTP requests to trigger this vulnerability.

Attack Vector

Network

Privileges Req.

None

User Interaction

None

ghost

Updated Nov 10, 2026View on NVD →

S4E scanner

mediumProduct Based Web Vulnerabilities~10 seconds

Ghost CMS - User Enumeration

Ghost CMS 5.9.4 contains a user enumeration vulnerability in the login functionality. The application reveals whether a user account exists through different error messages, allowing attackers to enumerate valid user accounts via specially-crafted HTTP requests. References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1625 https://nvd.nist.gov/vuln/detail/CVE-2022-41697 https://github.com/tryghost/ghost Remediation: Update to the latest version of Ghost CMS or apply security patches that implement consistent error messages regardless of whether the user exists.

Used 20 times · 10 assets checked · domain, subdomain, ipv4

Scanner page →Run scanner

CVE history: ghost

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →