39 matches found
BookStackApp BookStack authorization issue vulnerability
BookStackApp versions prior to 26.09.2 contain an authorization issue vulnerability. This vulnerability stems from improper authorization in AttachmentController; authenticated attackers with attachment permissions can enumerate, download, rename, re-associate, or replace attachments within draft...
EUVD-2026-18819
A weakness has been identified in BookStackApp BookStack up to 26.03. Affected is the function chapterToMarkdown of the file app/Exports/ExportFormatter.php of the component Chapter Export Handler. Executing a manipulation of the argument pages can lead to improper access controls. It is possible...
CVE-2026-5484
A weakness has been identified in BookStackApp BookStack up to 26.03. Affected is the function chapterToMarkdown of the file app/Exports/ExportFormatter.php of the component Chapter Export Handler. Executing a manipulation of the argument pages can lead to improper access controls. It is possible...
CVE-2026-5484 BookStackApp BookStack Chapter Export ExportFormatter.php chapterToMarkdown access control
A weakness has been identified in BookStackApp BookStack up to 26.03. Affected is the function chapterToMarkdown of the file app/Exports/ExportFormatter.php of the component Chapter Export Handler. Executing a manipulation of the argument pages can lead to improper access controls. It is possible...
CVE-2026-5484 BookStackApp BookStack Chapter Export ExportFormatter.php chapterToMarkdown access control
A weakness has been identified in BookStackApp BookStack up to 26.03. Affected is the function chapterToMarkdown of the file app/Exports/ExportFormatter.php of the component Chapter Export Handler. Executing a manipulation of the argument pages can lead to improper access controls. It is possible...
CVE-2022-0877
Cross-site Scripting XSS - Stored in GitHub repository bookstackapp/bookstack prior to v22.02.3...
EUVD-2023-54477
Malicious code in bioql PyPI...
EUVD-2022-1328
Malicious code in bioql PyPI...
Exploit for Server-Side Request Forgery in Bookstackapp Bookstack
phpfilterchainoraclepoc Overview The Synacktiv team pu...
Exploit for Server-Side Request Forgery in Bookstackapp Bookstack
PHP filter chains: file read from error-based oracle. Updated...
CVE-2023-4624
Server-Side Request Forgery SSRF in GitHub repository bookstackapp/bookstack prior to v23.08...
Server side request forgery (ssrf)
Server-Side Request Forgery SSRF in GitHub repository bookstackapp/bookstack prior to v23.08...
CVE-2023-4624
CVE-2023-4624: SSRF in BookStack (bookstackapp/bookstack) prior to v23.08. The issue is a server-side request forgery in the application’s handling of requests, enabling the server to be coerced into making unintended outbound requests. Affected product: BookStack software; vulnerable component/f...
CVE-2023-4624 Server-Side Request Forgery (SSRF) in bookstackapp/bookstack
Server-Side Request Forgery SSRF in GitHub repository bookstackapp/bookstack prior to v23.08...
CVE-2023-4624 Server-Side Request Forgery (SSRF) in bookstackapp/bookstack
Server-Side Request Forgery SSRF in GitHub repository bookstackapp/bookstack prior to v23.08...
CVE-2023-4624
Server-Side Request Forgery SSRF in GitHub repository bookstackapp/bookstack prior to v23.08...
CVE-2023-4624: Server-Side Request Forgery (SSRF)
Server-Side Request Forgery SSRF in GitHub repository bookstackapp/bookstack prior to v23.08...
BookStackApp BookStack Improper Access Control (CVE-2021-4119)
An improper access control vulnerability exists in BookStackApp BookStack. Successful exploitation of this vulnerability could allow a remote attacker to read sensitive files on the affected system...
