Ghost versions 5.3.0 before 6.58.0 fail to properly enforce access controls on comments in private mode. Unauthenticated visitors can read comments that should be restricted, bypassing privacy settings.
Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Call or email us to get started.