CVE-2021-39192

score

<0.1

cvss

6.5

epss

1.0%

published

2021-09-03

kev added

—

first seen

2026-10-21

Ghost < 4.10.0 contains a privilege escalation caused by improper limits service implementation in the integrations API endpoint, letting all authenticated users view admin API keys, exploit requires user authentication.