CVE-2021-3874

bookstack is vulnerable to Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...

CVE-2021-3768

bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-4119

bookstack is vulnerable to Improper Access Control...

CVE-2021-3758

bookstack is vulnerable to Server-Side Request Forgery SSRF...

CVE-2021-4194

bookstack is vulnerable to Improper Access Control...

CVE-2020-5256

BookStack before version 0.25.5 has a vulnerability where a user could upload PHP files through image upload functions, which would allow them to execute code on the host system remotely. They would then have the permissions of the PHP process. This most impacts scenarios where non-trusted users...

CVE-2020-26210

In BookStack before version 0.30.4, a user with permissions to edit a page could add an attached link which would execute untrusted JavaScript code when clicked by a viewer of the page. Dangerous content may remain in the database after this update. If you think this could have been exploited the...

CVE-2024-36676

The CVE-2024-36676 entry concerns BookStack prior to v24.05.1, where an incorrect access control flaw allows an attacker to confirm existing system users and trigger a targeted notification email DoS via public-facing forms. The vulnerability is documented in multiple sources (e.g., BookStack rel...

CVE-2022-40690

Cross-site scripting vulnerability in BookStack versions prior to v22.09 allows a remote authenticated attacker to inject an arbitrary script...

CVE-2022-40690

Cross-site scripting vulnerability in BookStack versions prior to v22.09 allows a remote authenticated attacker to inject an arbitrary script...

CVE-2021-4194

bookstack is vulnerable to Improper Access Control...

Cross site request forgery (csrf)

bookstack is vulnerable to Cross-Site Request Forgery CSRF...

GHSA-JM6P-WFJG-XM7X bookstack is vulnerable to Improper Access Control

bookstack is vulnerable to Improper Access Control...

CVE-2021-4026

bookstack is vulnerable to Improper Access Control...

BookStack 代码问题漏洞

BookStack is an open source platform for building wiki documents using PHP and Laravel from the BookStackApp Bookstackapp team. A code issue vulnerability exists in bookstack that stems from bookstack's susceptibility to unlimited uploads of dangerous types of files...

Cross site scripting

bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...