Approved changes feed: RSS · Atom

cpe:2.3:a:bookstackapp:bookstackapp/bookstack:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBookstackapp (d8795f02-d2cd-5c9e-9bb2-8c5229e35e17)
ProductBookstackapp/Bookstack (95753e30-8765-59e1-9c06-8f80bb80dd4c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-4624 vulnerable 2026-06-08 06:16:13.830346 Server-Side Request Forgery (SSRF) in bookstackapp/bookstack
LOW (2.4)
Server-Side Request Forgery (SSRF) in GitHub repository bookstackapp/bookstack prior to v23.08.
Published: 2023-08-30T12:02:20.664Z
Updated: 2024-10-01T18:39:14.627Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0877 vulnerable 2026-06-08 05:39:11.397718 Cross-site Scripting (XSS) - Stored in bookstackapp/bookstack
HIGH (7.6)
Cross-site Scripting (XSS) - Stored in GitHub repository bookstackapp/bookstack prior to v22.02.3.
Published: 2022-03-08T12:40:09.000Z
Updated: 2024-08-02T23:40:04.559Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-4194 vulnerable 2026-06-08 05:38:08.668291 Improper Access Control in bookstackapp/bookstack
MEDIUM (4.3)
bookstack is vulnerable to Improper Access Control
Published: 2022-01-06T17:35:10.000Z
Updated: 2024-08-03T17:16:04.262Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-4119 vulnerable 2026-06-08 05:38:08.453354 Improper Access Control in bookstackapp/bookstack
MEDIUM (5.3)
bookstack is vulnerable to Improper Access Control
Published: 2021-12-15T17:25:10.000Z
Updated: 2024-08-03T17:16:04.251Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-4026 vulnerable 2026-06-08 05:38:08.105797 Improper Access Control in bookstackapp/bookstack
MEDIUM (6.5)
bookstack is vulnerable to Improper Access Control
Published: 2021-11-30T19:55:10.000Z
Updated: 2024-08-03T17:16:03.288Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3944 vulnerable 2026-06-08 05:33:58.077942 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3916 vulnerable 2026-06-08 05:33:54.509096 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3915 vulnerable 2026-06-08 05:33:54.508731 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3906 vulnerable 2026-06-08 05:33:54.500413 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3874 vulnerable 2026-06-08 05:33:54.478948 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3768 vulnerable 2026-06-08 05:33:53.963127 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3767 vulnerable 2026-06-08 05:33:53.962759 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3758 vulnerable 2026-06-08 05:33:53.944537 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.