Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

ssddanbrown/bookstack

10 known vulnerabilities (5 high, 4 medium, 1 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
10 · 5 high, 4 medium, 1 low
Registry
Packagist

Advisories 10

  • Incorrect access control in BookStack before v24.05.1 allows attackers to confirm existing system users and perform targeted notification…

    Affected: fixed in 24.05.1.

  • Cross-site Scripting (XSS) - Stored in bookstackapp/bookstack

    Affected: fixed in 22.02.3.

  • CVE-2021-4194Medium 4.3

    Improper Access Control in bookstackapp/bookstack

    Affected: fixed in 21.12.1.

  • CVE-2021-4119Medium 5.3

    Improper Access Control in bookstackapp/bookstack

    Affected: fixed in 21.11.3.

  • Cross-Site Request Forgery (CSRF) in bookstackapp/bookstack

    Affected: fixed in 21.11.

  • CVE-2021-4026Medium 6.5

    Improper Access Control in bookstackapp/bookstack

    Affected: fixed in 21.11.2.

  • Unrestricted Upload of File with Dangerous Type in bookstackapp/bookstack

    Affected: fixed in 21.0.3.

  • Cross-Site Scripting in BookStack

    Affected: fixed in 0.30.4.

  • CVE-2020-11055Medium 6.3

    Cross-site Scripting in BookStack

    Affected: from 0.18.0, fixed in 0.29.2.

  • Remote Code Execution Through Image Uploads in BookStack

    Affected: fixed in 0.25.5.