Known Vulnerabilities for products from Bookstackapp
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Bookstackapp".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-4624 json | Server-Side Request Forgery (SSRF) in GitHub repository bookstackapp/bookstack prior to v23.08. | 2.4 - LOW | 2023-08-30 | 2023-09-01 |
| CVE-2022-40690 json | Cross-site scripting vulnerability in BookStack versions prior to v22.09 allows a remote authenticated attacker to inject an ... | 5.4 - MEDIUM | 2022-10-24 | 2022-10-24 |
| CVE-2022-0877 json | Cross-site Scripting (XSS) - Stored in GitHub repository bookstackapp/bookstack prior to v22.02.3. | 5.4 - MEDIUM | 2022-03-08 | 2022-03-11 |
| CVE-2021-4194 json | bookstack is vulnerable to Improper Access Control | 6.5 - MEDIUM | 2022-01-06 | 2022-07-25 |
| CVE-2021-4119 json | bookstack is vulnerable to Improper Access Control | 9.8 - CRITICAL | 2021-12-15 | 2022-08-09 |
| CVE-2021-4026 json | bookstack is vulnerable to Improper Access Control | 4.3 - MEDIUM | 2021-11-30 | 2022-08-09 |
| CVE-2021-3944 json | bookstack is vulnerable to Cross-Site Request Forgery (CSRF) | 6.8 - MEDIUM | 2021-12-02 | 2021-12-04 |
| CVE-2021-3916 json | bookstack is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 6.5 - MEDIUM | 2021-11-05 | 2021-11-09 |
| CVE-2021-3915 json | bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type | 5.7 - MEDIUM | 2021-11-13 | 2021-11-17 |
| CVE-2021-3906 json | bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type | 6.5 - MEDIUM | 2021-10-27 | 2021-11-03 |
| CVE-2021-3874 json | bookstack is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 6.5 - MEDIUM | 2021-10-15 | 2021-10-20 |
| CVE-2021-3768 json | bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 5.4 - MEDIUM | 2021-09-06 | 2021-09-09 |
| CVE-2021-3767 json | bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 5.4 - MEDIUM | 2021-09-06 | 2021-09-09 |
| CVE-2021-3758 json | bookstack is vulnerable to Server-Side Request Forgery (SSRF) | 6.5 - MEDIUM | 2021-09-02 | 2021-09-10 |
| CVE-2020-26260 json | BookStack is a platform for storing and organising information and documentation. In BookStack before version 0.30.5, a user ... | 6.4 - MEDIUM | 2020-12-09 | 2020-12-10 |
| CVE-2020-26211 json | In BookStack before version 0.30.4, a user with permissions to edit a page could insert JavaScript code through the use of `j... | 8.7 - HIGH | 2020-11-03 | 2020-11-16 |
| CVE-2020-26210 json | In BookStack before version 0.30.4, a user with permissions to edit a page could add an attached link which would execute unt... | 8.7 - HIGH | 2020-11-03 | 2020-11-16 |
| CVE-2020-11055 json | In BookStack greater than or equal to 0.18.0 and less than 0.29.2, there is an XSS vulnerability in comment creation. A user ... | 5.4 - MEDIUM | 2020-05-07 | 2020-05-13 |
| CVE-2020-5256 json | BookStack before version 0.25.5 has a vulnerability where a user could upload PHP files through image upload functions, which... | 8.8 - HIGH | 2020-03-09 | 2020-03-10 |
| CVE-2017-1000462 json | BookStack version 0.18.4 is vulnerable to stored cross-site scripting, within the page creation page, which can result in dis... | 5.4 - MEDIUM | 2018-01-03 | 2018-01-17 |
Known software with vulnerabilities from Bookstackapp
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Bookstackapp | Bookstack | - |