Bookstackapp Bookstack vulnerabilities

• bookstackapp bookstack BookStack before 26.09.2 Incorrect Authorization via AttachmentController on Draft Pages CVE-2026-116020 5.3 MediumOctober 24, 2026
• bookstackapp bookstack BookStack < 26.05.5 Authentication Bypass via Social Login Provider Confusion CVE-2026-89022 9.1 CriticalSeptember 15, 2026
• bookstackapp bookstack BookStack Attachment Edit Endpoint AttachmentController.php getUpdateForm access control CVE-2026-86285 5.3 MediumSeptember 7, 2026
• bookstackapp bookstack BookStack before 26.05.4 Stored XSS via Drawing Upload CVE-2026-84695 9.3 CriticalSeptember 2, 2026
• bookstackapp bookstack BookStack before 26.05.4 Remote Code Execution via Book Cover CVE-2026-82450 8.7 HighAugust 29, 2026
• bookstackapp bookstack BookStack < 26.05.4 Broken Access Control via Image Gallery API CVE-2026-67204 5.3 MediumAugust 24, 2026
• bookstackapp bookstack BookStackApp BookStack Chapter Export ExportFormatter.php chapterToMarkdown access control CVE-2026-5484 6.9 MediumApril 3, 2026
• bookstackapp bookstack BookStack Incorrect Access Control vulnerability CVE-2024-36676 Fix available 7.5 HighJuly 9, 2024
• bookstack Book Stack v23.10.2 - LFR via Blind SSRF CVE-2023-6199 Public exploit 6.5 MediumNovember 20, 2023
• bookstackapp bookstack, bookstackapp/bookstack +1 more Server-Side Request Forgery (SSRF) in bookstackapp/bookstack CVE-2023-4624 2.4 LowAugust 30, 2023
• bookstack Cross-site scripting vulnerability in BookStack versions prior to v22.09 allows a remote... CVE-2022-40690 5.4 MediumOctober 24, 2022
• bookstackapp bookstack, bookstackapp/bookstack +1 more Cross-site Scripting (XSS) - Stored in bookstackapp/bookstack CVE-2022-0877 Fix available 7.6 HighMarch 8, 2022
• bookstackapp bookstack, bookstackapp/bookstack +1 more Improper Access Control in bookstackapp/bookstack CVE-2021-4194 Fix available 4.3 MediumJanuary 6, 2022
• bookstackapp bookstack, bookstackapp/bookstack +1 more Improper Access Control in bookstackapp/bookstack CVE-2021-4119 Fix available EPSS 26.9% 5.3 MediumDecember 15, 2021
• bookstackapp bookstack, bookstackapp/bookstack +1 more Cross-Site Request Forgery (CSRF) in bookstackapp/bookstack CVE-2021-3944 Fix available 3.1 LowDecember 2, 2021
• bookstackapp bookstack, bookstackapp/bookstack +1 more Improper Access Control in bookstackapp/bookstack CVE-2021-4026 Fix available 6.5 MediumNovember 30, 2021
• bookstackapp bookstack, bookstackapp/bookstack +1 more Unrestricted Upload of File with Dangerous Type in bookstackapp/bookstack CVE-2021-3915 Fix available 7.6 HighNovember 13, 2021
• bookstackapp bookstack, bookstackapp/bookstack +1 more Path Traversal in bookstackapp/bookstack CVE-2021-3916 6.5 MediumNovember 5, 2021
• bookstackapp bookstack, bookstackapp/bookstack +1 more Unrestricted Upload of File with Dangerous Type in bookstackapp/bookstack CVE-2021-3906 5.4 MediumOctober 27, 2021
• bookstackapp bookstack, bookstackapp/bookstack +1 more Path Traversal in bookstackapp/bookstack CVE-2021-3874 4.3 MediumOctober 15, 2021
• bookstackapp bookstack, bookstackapp/bookstack +1 more Cross-site Scripting (XSS) - Stored in bookstackapp/bookstack CVE-2021-3768 5.4 MediumSeptember 6, 2021
• bookstackapp bookstack, bookstackapp/bookstack +1 more Cross-site Scripting (XSS) - Stored in bookstackapp/bookstack CVE-2021-3767 5.4 MediumSeptember 6, 2021
• bookstackapp bookstack, bookstackapp/bookstack +1 more Server-Side Request Forgery (SSRF) in bookstackapp/bookstack CVE-2021-3758 6.3 MediumSeptember 2, 2021
• bookstackapp bookstack Server Side Request Forgery in BookStack CVE-2020-26260 6.4 MediumDecember 9, 2020
• bookstackapp bookstack Cross-Site Scripting in BookStack CVE-2020-26211 Fix available 7.7 HighNovember 3, 2020
• bookstackapp bookstack Cross-Site Scripting in BookStack CVE-2020-26210 7.7 HighNovember 3, 2020
• bookstackapp bookstack Cross-site Scripting in BookStack CVE-2020-11055 Fix available 6.3 MediumMay 7, 2020
• bookstackapp bookstack Remote Code Execution Through Image Uploads in BookStack CVE-2020-5256 Fix available 7.9 HighMarch 9, 2020
• bookstackapp bookstack BookStack version 0.18.4 is vulnerable to stored cross-site scripting, within the page creation... CVE-2017-1000462 5.4 MediumJanuary 3, 2018