Approved changes feed: RSS · Atom
cpe:2.3:a:bookstackapp:bookstack:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Bookstackapp (d8795f02-d2cd-5c9e-9bb2-8c5229e35e17) |
|---|---|
| Product | Bookstack (dc1d796e-f699-5c0b-8d86-5bbc7a4b1754) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/bookstackapp/bookstack |
purl2cpe | 2026-06-01 10:14:53.123301 |
pkg:sourceforge/bookstack.mirror |
purl2cpe | 2026-06-01 10:14:53.123304 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-5484 |
vulnerable | 2026-06-08 08:07:03.755907 |
BookStackApp BookStack Chapter Export ExportFormatter.php chapterToMarkdown access control
MEDIUM (5.3)
A weakness has been identified in BookStackApp BookStack up to 26.03. Affected is the function chapterToMarkdown of the file app/Exports/ExportFormatter.php of the component Chapter Export Handler. Executing a manipulation of the argument pages can lead to improper access controls. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 26.03.1 is able to address this issue. This patch is called 8a59895ba063040cc8dafd82e94024c406df3d04. It is advisable to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
Published: 2026-04-03T19:45:12.967Z
Updated: 2026-04-08T18:52:44.563Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4624 |
vulnerable | 2026-06-08 06:16:13.831423 |
Server-Side Request Forgery (SSRF) in bookstackapp/bookstack
LOW (2.4)
Server-Side Request Forgery (SSRF) in GitHub repository bookstackapp/bookstack prior to v23.08.
Published: 2023-08-30T12:02:20.664Z
Updated: 2024-10-01T18:39:14.627Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40690 |
vulnerable | 2026-06-08 05:48:27.905571 |
Details available
Cross-site scripting vulnerability in BookStack versions prior to v22.09 allows a remote authenticated attacker to inject an arbitrary script.
Published: 2022-10-24T00:00:00.000Z
Updated: 2025-05-07T14:12:25.210Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0877 |
vulnerable | 2026-06-08 05:39:11.398447 |
Cross-site Scripting (XSS) - Stored in bookstackapp/bookstack
HIGH (7.6)
Cross-site Scripting (XSS) - Stored in GitHub repository bookstackapp/bookstack prior to v22.02.3.
Published: 2022-03-08T12:40:09.000Z
Updated: 2024-08-02T23:40:04.559Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-4194 |
vulnerable | 2026-06-08 05:38:08.668429 |
Improper Access Control in bookstackapp/bookstack
MEDIUM (4.3)
bookstack is vulnerable to Improper Access Control
Published: 2022-01-06T17:35:10.000Z
Updated: 2024-08-03T17:16:04.262Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-4119 |
vulnerable | 2026-06-08 05:38:08.453521 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-4026 |
vulnerable | 2026-06-08 05:38:08.106848 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3944 |
vulnerable | 2026-06-08 05:33:58.077988 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3916 |
vulnerable | 2026-06-08 05:33:54.509127 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3915 |
vulnerable | 2026-06-08 05:33:54.508768 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3906 |
vulnerable | 2026-06-08 05:33:54.500451 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3874 |
vulnerable | 2026-06-08 05:33:54.478983 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3768 |
vulnerable | 2026-06-08 05:33:53.963165 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3767 |
vulnerable | 2026-06-08 05:33:53.962800 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3758 |
vulnerable | 2026-06-08 05:33:53.945638 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5256 |
vulnerable | 2026-06-08 05:26:41.612187 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-26260 |
vulnerable | 2026-06-08 05:23:51.001669 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-26211 |
vulnerable | 2026-06-08 05:23:50.844007 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-26210 |
vulnerable | 2026-06-08 05:23:50.843520 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-11055 |
vulnerable | 2026-06-08 05:16:36.369033 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.