onyx --cves cve-2020-8134

CVE-2020-8134

score: <0.1
cvss: 8.1
epss: 1.2%
published: 2020-03-20
kev added: —
first seen: 2026-10-21

Ghost CMS < 3.10.0 contains a server-side request forgery caused by improper validation in request handling, letting attackers scan networks or interact with internal systems, exploit requires network access to the server.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

2020-03-20 Published
2026-10-21 Tracked by Onyx
2026-10-21 Public PoC

Exploit availability

Public PoC flagged by vulnx; no direct exploit link among the citations.

Weaknesses

CWE-918

References 1

https://hackerone.com/reports/793704