Bookstackapp

Bookstack

22 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9

CVE-2020-5256

  • EPSS 0.68%
  • Veröffentlicht 09.03.2020 16:15:15
  • Zuletzt bearbeitet 21.11.2024 05:33:46

BookStack before version 0.25.5 has a vulnerability where a user could upload PHP files through image upload functions, which would allow them to execute code on the host system remotely. They would then have the permissions of the PHP process. This ...

5.4

CVE-2017-1000462

Exploit
  • EPSS 0.32%
  • Veröffentlicht 03.01.2018 20:29:00
  • Zuletzt bearbeitet 21.11.2024 03:04:47

BookStack version 0.18.4 is vulnerable to stored cross-site scripting, within the page creation page, which can result in disruption of service and execution of javascript code.