Approved changes feed: RSS · Atom

cpe:2.3:a:bookstackapp:bookstack:0.18.4:*:*:*:*:*:*:*

part: a version: 0.18.4 update: *

VendorBookstackapp (d8795f02-d2cd-5c9e-9bb2-8c5229e35e17)
ProductBookstack (dc1d796e-f699-5c0b-8d86-5bbc7a4b1754)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/bookstackapp/bookstack purl2cpe 2026-06-01 10:14:53.123390
pkg:sourceforge/bookstack.mirror purl2cpe 2026-06-01 10:14:53.123392

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1000462 vulnerable 2026-06-08 05:08:34.580821 Details available
BookStack version 0.18.4 is vulnerable to stored cross-site scripting, within the page creation page, which can result in disruption of service and execution of javascript code.
Published: 2018-01-03T20:00:00.000Z
Updated: 2024-09-17T00:16:49.222Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.