Product · BookStackApp

bookstackapp/bookstack

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

Medium 4.3

CVE-2021-4194

Improper Access Control in bookstackapp/bookstack

bookstack is vulnerable to Improper Access Control

BookStackApp bookstackapp/bookstack ssddanbrown/bookstack Packagist

Jan 6, 2022
Medium 5.3

CVE-2021-4119 EPSS 27%

Improper Access Control in bookstackapp/bookstack

bookstack is vulnerable to Improper Access Control

BookStackApp bookstackapp/bookstack ssddanbrown/bookstack Packagist

Dec 15, 2021
Medium 6.5

CVE-2021-4026

Improper Access Control in bookstackapp/bookstack

bookstack is vulnerable to Improper Access Control

BookStackApp bookstackapp/bookstack ssddanbrown/bookstack Packagist

Nov 30, 2021
Medium 6.5

CVE-2021-3916

Path Traversal in bookstackapp/bookstack

bookstack is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

BookStackApp bookstackapp/bookstack

Nov 5, 2021
Medium 5.4

CVE-2021-3906

Unrestricted Upload of File with Dangerous Type in bookstackapp/bookstack

bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type

BookStackApp bookstackapp/bookstack

Oct 27, 2021
Medium 4.3

CVE-2021-3874

Path Traversal in bookstackapp/bookstack

bookstack is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

BookStackApp bookstackapp/bookstack

Oct 15, 2021
Medium 5.4

CVE-2021-3768

Cross-site Scripting (XSS) - Stored in bookstackapp/bookstack

bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

BookStackApp bookstackapp/bookstack

Sep 6, 2021
Medium 5.4

CVE-2021-3767

Cross-site Scripting (XSS) - Stored in bookstackapp/bookstack

bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

BookStackApp bookstackapp/bookstack

Sep 6, 2021
Medium 6.3

CVE-2021-3758

Server-Side Request Forgery (SSRF) in bookstackapp/bookstack

bookstack is vulnerable to Server-Side Request Forgery (SSRF)

BookStackApp bookstackapp/bookstack

Sep 2, 2021