CVE-2022-0877

CVE-2022-0877 affects the BookStack project (bookstackapp/bookstack). A Cross-site Scripting (XSS) vulnerability is stored in the repository prior to v22.02.3. Public sources in the connected set confirm the issue and reference the affected version range, with remediation noted as upgrading to v2...

CVE-2021-3915

CVE-2021-3915 affects BookStack (BookStackApp) and is due to a lack of file type restrictions in the controller, enabling Unrestricted Upload of files with dangerous types. Variants are noted across multiple feeds (NVD, CNVD, GHSA, RH—Red Hat) with exploit guidance not provided in the supplied do...