CVE-2025-9862 – Ghost 6.0.6 – SSRF via oEmbed Bookmark

CVE ID : CVE-2025-9862

Published : Sept. 17, 2025, 3:15 p.m. | 1 hour, 44 minutes ago

Description : Server-Side Request Forgery (SSRF) vulnerability in Ghost allows an attacker to access internal resources.This issue affects Ghost: from 6.0.0 through 6.0.8, from 5.99.0 through 5.130.3.

Severity: 6.1 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…