Bookstackappbookstack (Bookstackapp) - vulnerabilities (CVEs)

13 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2023-08-30. Vendor: Bookstackapp.

CVEs of Bookstackappbookstack

• CVE-2023-4624 - CVSS 2.4 (low), 2023-08-30: Server-Side Request Forgery (SSRF) in GitHub repository bookstackapp/bookstack prior to v23.08.
• CVE-2022-0877 - CVSS 7.6 (high), 2022-03-08: Cross-site Scripting (XSS) - Stored in GitHub repository bookstackapp/bookstack prior to v22.02.3.
• CVE-2021-4194 - CVSS 6.5 (medium), 2022-01-06: bookstack is vulnerable to Improper Access Control
• CVE-2021-4119 - CVSS 9.8 (critical), 2021-12-15: bookstack is vulnerable to Improper Access Control
• CVE-2021-3944 - CVSS 6.8 (medium), 2021-12-02: bookstack is vulnerable to Cross-Site Request Forgery (CSRF)
• CVE-2021-4026 - CVSS 6.5 (medium), 2021-11-30: bookstack is vulnerable to Improper Access Control
• CVE-2021-3915 - CVSS 7.6 (high), 2021-11-13: bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type
• CVE-2021-3916 - CVSS 6.5 (medium), 2021-11-05: bookstack is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
• CVE-2021-3906 - CVSS 6.5 (medium), 2021-10-27: bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type
• CVE-2021-3874 - CVSS 6.5 (medium), 2021-10-15: bookstack is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
• CVE-2021-3767 - CVSS 5.4 (medium), 2021-09-06: bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2021-3768 - CVSS 5.4 (medium), 2021-09-06: bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2021-3758 - CVSS 6.5 (medium), 2021-09-02: bookstack is vulnerable to Server-Side Request Forgery (SSRF)