CVE-2022-41697

A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4. A specially-crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send a series of HTTP requests to trigger this vulnerability.

• CWE-204

• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1625Exploit, Third Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1625Exploit, Third Party Advisory

Published

Dec 22, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-41691When a BIG-IP Advanced WAF/ASM security policy is configured…7.5
• CVE-2022-41692Missing Authorization vulnerability in Appointment Hour Book…8.8
• CVE-2022-41693Uncontrolled search path in the Intel(R) Quartus(R) Prime Pr…7.8
• CVE-2022-41694In BIG-IP versions 16.1.x before 16.1.3, 15.1.x before 15.1.…4.9
• CVE-2022-41695Missing Authorization vulnerability in SedLex Traffic Manage…6.5
• CVE-2022-41696Versions of VISAM VBASE Automation Base prior to 11.7.5 may …5.5
• CVE-2022-41698Missing Authorization vulnerability in Layered If Menu.This …6.5
• CVE-2022-41699Incorrect permission assignment for critical resource in som…7.8
• CVE-2022-4170The rxvt-unicode package is vulnerable to a remote code exec…9.8
• CVE-2022-41700Insecure inherited permissions in some Intel(R) NUC Pro Soft…7.8
• CVE-2022-41701The affected product DIAEnergie (versions prior to v1.9.01.0…5.4
• CVE-2022-41702The affected product DIAEnergie (versions prior to v1.9.01.0…5.4