CVE-2025-9862 | Ghost up to 5.130.3/6.0.8 on Linux server-side request forgery (GHSA-f7qg-xj45-w956)

September 17, 2025 Yanac

A vulnerability, which was classified as critical, was found in Ghost up to 5.130.3/6.0.8 on Linux. Affected by this issue is some unknown functionality. The manipulation results in server-side request forgery.

This vulnerability is reported as CVE-2025-9862. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More