Lucene search

K
cvelistJpcertCVELIST:CVE-2022-40690
HistoryOct 24, 2022 - 12:00 a.m.

CVE-2022-40690

2022-10-2400:00:00
jpcert
www.cve.org
1
cross-site scripting
bookstack
remote attacker
arbitrary script

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

37.9%

Cross-site scripting vulnerability in BookStack versions prior to v22.09 allows a remote authenticated attacker to inject an arbitrary script.

CNA Affected

[
  {
    "vendor": "BookStack",
    "product": "BookStack",
    "versions": [
      {
        "version": "versions prior to v22.09",
        "status": "affected"
      }
    ]
  }
]

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

37.9%

Related for CVELIST:CVE-2022-40690