CVE-2022-0877

CVE-2022-0877 affects the BookStack project (bookstackapp/bookstack). A Cross-site Scripting (XSS) vulnerability is stored in the repository prior to v22.02.3. Public sources in the connected set confirm the issue and reference the affected version range, with remediation noted as upgrading to v2...

Github bookstack跨站脚本漏洞

Github bookstack is a platform for storing and organizing information and documents. A security vulnerability exists in Github bookstack, no information about the vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...

bookstack is vulnerable to Improper Access Control

bookstack is vulnerable to Improper Access Control...

GHSA-GHHM-XRWP-75M9 bookstack is vulnerable to Improper Access Control

bookstack is vulnerable to Improper Access Control...

bookstack Access Control Error Vulnerability (CNVD-2022-03208)

BookStack is the BookStackApp team's set of open source platform for building wiki documents using PHP and Laravel. bookstack suffers from an access control error vulnerability that stems from a network system or product that does not properly restrict access to resources from unauthorized roles...

Privilege Escalation

ssddanbrown/bookstack is vulnerable to privilege escalation. The vulnerability exists because it does not enforce access control to create a chapter within the chosen book...

CVE-2021-4194

bookstack is vulnerable to Improper Access Control...

CVE-2021-4194

bookstack is vulnerable to Improper Access Control...

CVE-2021-4194

bookstack is vulnerable to Improper Access Control...

Improper access control

bookstack is vulnerable to Improper Access Control...

CVE-2021-4194

CVE-2021-4194 is linked to BookStack (bookstackapp/bookstack) and described across multiple feeds as an Improper Access Control vulnerability. The connected documents identify the issue as an access control error but do not provide concrete technical details such as affected versions, root-cause ...

BookStack 访问控制错误漏洞

BookStack is the BookStackApp team's set of open source platform for building wiki documents using PHP and Laravel. bookstack suffers from an access control error vulnerability that stems from a network system or product that does not properly restrict access to resources from unauthorized roles...

Improper Access Control in bookstackapp/bookstack

Description parentChapter permissions are not enforced during sort. Users with only book-update permissions on their own page can move their pages into restricted chapters via modifying the parentChapter id in the sortmap. Users do not need to have access to restricted books / chapter in order to...

BookStack Access Control Error Vulnerability (CNVD-2021-103513)

BookStack is an open source set of BookStackApp Bookstackapp team's platform for building wiki documents using PHP and Laravel.BookStack suffers from an access control error vulnerability that makes it vulnerable to improper access control. No detailed vulnerability details are currently availabl...

BookStack is vulnerable to Improper Access Control.

BookStack prior to version 21.11.3 is vulnerable to Improper Access Control. A logged-in user with no privileges OR guest user if public access enabled can access the /search/users/select AJAX endpoint meant for admins to manage audit logs, to dump all usernames existing in the Bookstack database...

GHSA-9C5C-5J4H-8Q2C BookStack is vulnerable to Improper Access Control.

BookStack prior to version 21.11.3 is vulnerable to Improper Access Control. A logged-in user with no privileges OR guest user if public access enabled can access the /search/users/select AJAX endpoint meant for admins to manage audit logs, to dump all usernames existing in the Bookstack database...

CVE-2021-4119

bookstack is vulnerable to Improper Access Control...

CVE-2021-4119

bookstack is vulnerable to Improper Access Control...

CVE-2021-4119

bookstack is vulnerable to Improper Access Control...

Improper access control

bookstack is vulnerable to Improper Access Control...