CVE-2023-40028 PoC — Ghost Foundation Ghost 后置链接漏洞

Source

https://github.com/sudlit/CVE-2023-40028

Associated Vulnerability

Title:Ghost Foundation Ghost 后置链接漏洞 (CVE-2023-40028)
Description:Ghost Foundation Ghost是Ghost开源的一款用 JavaScript 编写的个人博客系统。 Ghost 5.59.1 版本之前存在后置链接漏洞，该漏洞源于允许经过身份验证的用户上传符号链接文件。攻击者利用该漏洞可以读取任意文件。

Readme

# Proof of Concept (PoC) for CVE-2023-40028

CVE-2023-40028 is a **vulnerability in Ghost CMS that allows arbitrary file reads through improper file handling.** This PoC demonstrates how the exploit works under controlled conditions. **Educational use only.**

**Reference:** Adapted from the original PoC by [0xyassine](https://github.com/0xyassine/CVE-2023-40028), rewritten in Python and applied to the HackTheBox challenge "LinkVortex."

### Summary:

1. **Vulnerability:** Arbitrary file read in Ghost CMS.
2. **Impact:** Access to sensitive files on the server.
3. **Fix:** Update to the latest Ghost CMS version.

**Usage:**
```
python3 ./CVE-2023-40028.py --url <http://abc.xyz> -u <username> -p <password>
```

**Use this information responsibly. Unauthorized exploitation is illegal.**

File Snapshot


 [4.0K]  /data/pocs/5ea1d6fb68df32c63b09a02234a6db715ae2e32b
├── [3.7K]  CVE-2023-40028.py
└── [ 797]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!