Skip to content
OpenAdvisories

Vendor

BookStack

2 known vulnerabilities.

Products

BookStack 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2023-6199 Public exploit

    Book Stack v23.10.2 - LFR via Blind SSRF

    Book Stack version 23.10.2 allows filtering local files on the server. This is possible because the application is vulnerable to SSRF.

    BookStack BookStack
  • Medium 5.4
    CVE-2022-40690

    Cross-site scripting vulnerability in BookStack versions prior to v22.09 allows a remote authenticated attacker to inje…

    BookStack BookStack