bookstackapp Summary

Latest vulnerabilities published by bookstackapp

JSON RSS CSV 🔔 Create Alert Trigger

3 April 2026

Improper Access Control in BookStackApp BookStack Affects Export Functionality
CVE-2026-5484
BookstackappBookstack👾🟡6.9MEDIUM

30 August 2023

Server-Side Request Forgery (SSRF) in bookstackapp/bookstack
CVE-2023-4624
BookstackappBookstackapp/bookstack2.4LOW

8 March 2022

Cross-site Scripting (XSS) - Stored in bookstackapp/bookstack
CVE-2022-0877
BookstackappBookstackapp/bookstack7.6HIGH

6 January 2022

Improper Access Control in bookstackapp/bookstack
CVE-2021-4194
BookstackappBookstackapp/bookstack4.3MEDIUM

15 December 2021

Improper Access Control in bookstackapp/bookstack
CVE-2021-4119
BookstackappBookstackapp/bookstack5.3MEDIUM

2 December 2021

Cross-Site Request Forgery (CSRF) in bookstackapp/bookstack
CVE-2021-3944
BookstackappBookstackapp/bookstack3.1LOW

30 November 2021

Improper Access Control in bookstackapp/bookstack
CVE-2021-4026
BookstackappBookstackapp/bookstack6.5MEDIUM

13 November 2021

Unrestricted Upload of File with Dangerous Type in bookstackapp/bookstack
CVE-2021-3915
BookstackappBookstackapp/bookstack7.6HIGH

5 November 2021

Path Traversal in bookstackapp/bookstack
CVE-2021-3916
BookstackappBookstackapp/bookstack6.5MEDIUM

27 October 2021

Unrestricted Upload of File with Dangerous Type in bookstackapp/bookstack
CVE-2021-3906
BookstackappBookstackapp/bookstack5.4MEDIUM

15 October 2021

Path Traversal in bookstackapp/bookstack
CVE-2021-3874
BookstackappBookstackapp/bookstack4.3MEDIUM

6 September 2021

2 September 2021

Server-Side Request Forgery (SSRF) in bookstackapp/bookstack
CVE-2021-3758
BookstackappBookstackapp/bookstack6.3MEDIUM

9 December 2020

Server Side Request Forgery in BookStack
CVE-2020-26260
BookstackappBookstack6.4MEDIUM

3 November 2020

7 May 2020

Cross-site Scripting in BookStack
CVE-2020-11055
BookstackappBookstack6.3MEDIUM

9 March 2020

Remote Code Execution Through Image Uploads in BookStack
CVE-2020-5256
BookstackappBookstack7.9HIGH

3 January 2018

Stored Cross-Site Scripting Vulnerability in BookStack by BookStackApp
CVE-2017-1000462
BookstackappBookstack5.4MEDIUM