CVE-2021-39192 - CVE House
Back to Database
Status published Medium CVE-2021-39192

Privilege escalation: all users can access Admin-level API keys

Vulnerability Description

Ghost is a Node.js content management system. An error in the implementation of the limits service between versions 4.0.0 and 4.9.4 allows all authenticated users (including contributors) to view admin-level API keys via the integrations API endpoint, leading to a privilege escalation vulnerability. This issue is patched in Ghost version 4.10.0. As a workaround, disable all non-Administrator accounts to prevent API access. It is highly recommended to regenerate all API keys after patching or applying the workaround.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-39192

Credits & Attribution

No credits recorded in the NVD database.

References

More from TryGhost

View All →
CVE-2024-43409
Ghost's improper authentication allows access to member information and actions
Medium 6.5
CVE-2023-40028
Arbitrary file read via symlinks in Ghost
Medium 4.9
CVE-2023-31133
Ghost vulnerable to disclosure of private API fields
High 7.5
CVE-2021-32817
File disclosure in express-hbs
Medium 5.4
CVE-2021-29484
DOM XSS in Theme Preview
Medium 6.8

Affected Vendor

Affected Software

Ghost
Vulnerable Versions:
>= 4.0.0, < 4.10.0

Timeline

Official Publish: September 3rd, 2021
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Weaknesses (CWE)

CWE-200

MITRE ATT&CK TTPs

T1213 Data from Information Repositories
Collection
T1005 Data from Local System
Collection
T1552 Unsecured Credentials
Credential Access
T1041 Exfiltration Over C2 Channel
Exfiltration