CVE Browser

Page 1

BookStack Attachment Edit Endpoint AttachmentController.php getUpdateForm access control

Book Stack v23.10.2 - LFR via Blind SSRF

Cross-site scripting vulnerability in BookStack versions prior to v22.09 allows a remote authenticated attacker to inject an arbitrary script.

CVE ID	Description	Severity	CVSS	EPSS	Published
CVE-2026-86285	BookStack Attachment Edit Endpoint AttachmentController.php getUpdateForm access control	MEDIUM	5.3	0.39%	Sep 7, 2026
CVE-2023-6199	Book Stack v23.10.2 - LFR via Blind SSRF	MEDIUM	6.5	1.38%	Nov 20, 2023
CVE-2022-40690	Cross-site scripting vulnerability in BookStack versions prior to v22.09 allows a remote authenticated attacker to inject an arbitrary script.	MEDIUM	5.4	0.77%	Oct 24, 2022

Rows per page

Showing 1 to 3 CVEs · page 1