bookstackapp kayıtları

bookstackapp üreticisine ait 22 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %50
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

22 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
47Planlayın	CVE-2021-4119İstismar yok	Improper Access Control in bookstackapp/bookstackbookstackapp · bookstack · CWE-284 Kimlik doğrulamasız Erişim denetimi (IDOR)	Kritik9,8	—	%26,9	15 Ara 2021
36İzleyin	CVE-2020-5256İstismar yok	Remote Code Execution Through Image Uploads in BookStackbookstackapp · bookstack · CWE-95 RCE	Yüksek8,8	—	%2,0	9 Mar 2020
34İzleyin	CVE-2020-26210İstismar yok	Cross-Site Scripting in BookStackbookstackapp · bookstack · CWE-79 XSS	Yüksek8,7	—	%1,2	3 Kas 2020
34İzleyin	CVE-2020-26211İstismar yok	Cross-Site Scripting in BookStackbookstackapp · bookstack · CWE-79 XSS	Yüksek8,7	—	%1,1	3 Kas 2020
30İzleyin	CVE-2024-36676İstismar yok	Incorrect access control in BookStack before v24.05.1 allows attackers to confirm existing system users and perform targeted notification emCWE-79 Kimlik doğrulamasız XSS Hizmet dışı bırakma	Yüksek7,5	—	%0,6	9 Tem 2024
27İzleyin	CVE-2021-3944İstismar yok	Cross-Site Request Forgery (CSRF) in bookstackapp/bookstackbookstackapp · bookstack · CWE-352 Kimlik doğrulamasız CSRF	Orta6,8	—	%0,6	2 Ara 2021
26İzleyin	CVE-2023-6199Kavram kanıtı	Book Stack v23.10.2 - LFR via Blind SSRFbookstackapp · bookstack · CWE-918 SSRF	Orta6,5	—	%1,4	20 Kas 2023
26İzleyin	CVE-2021-3916İstismar yok	Path Traversal in bookstackapp/bookstackbookstackapp · bookstack · CWE-22 Yol geçişi	Orta6,5	—	%1,2	5 Kas 2021
26İzleyin	CVE-2021-3874İstismar yok	Path Traversal in bookstackapp/bookstackbookstackapp · bookstack · CWE-22 Yol geçişi	Orta6,5	—	%1,2	15 Eki 2021
26İzleyin	CVE-2021-3758İstismar yok	Server-Side Request Forgery (SSRF) in bookstackapp/bookstackbookstackapp · bookstack · CWE-918 SSRF	Orta6,5	—	%0,8	2 Eyl 2021
26İzleyin	CVE-2021-4194İstismar yok	Improper Access Control in bookstackapp/bookstackbookstackapp · bookstack · CWE-284 Erişim denetimi (IDOR)	Orta6,5	—	%0,7	6 Oca 2022
26İzleyin	CVE-2021-3906İstismar yok	Unrestricted Upload of File with Dangerous Type in bookstackapp/bookstackbookstackapp · bookstack · CWE-434 Dosya yükleme	Orta6,5	—	%0,7	27 Eki 2021
25İzleyin	CVE-2020-26260İstismar yok	Server Side Request Forgery in BookStackbookstackapp · bookstack · CWE-74	Orta6,4	—	%0,8	9 Ara 2020
22İzleyin	CVE-2021-3915İstismar yok	Unrestricted Upload of File with Dangerous Type in bookstackapp/bookstackbookstackapp · bookstack · CWE-434 Dosya yükleme	Orta5,7	—	%1,0	13 Kas 2021
21İzleyin	CVE-2022-0877İstismar yok	Cross-site Scripting (XSS) - Stored in bookstackapp/bookstackbookstackapp · bookstack · CWE-79 XSS	Orta5,4	—	%0,8	8 Mar 2022
21İzleyin	CVE-2020-11055İstismar yok	Cross-site Scripting in BookStackbookstackapp · bookstack · CWE-79 XSS	Orta5,4	—	%0,8	7 May 2020
21İzleyin	CVE-2017-1000462İstismar yok	BookStack version 0.18.4 is vulnerable to stored cross-site scripting, within the page creation page, which can result in disruption of servbookstackapp · bookstack · CWE-79 XSS	Orta5,4	—	%0,8	3 Oca 2018
21İzleyin	CVE-2022-40690İstismar yok	Cross-site scripting vulnerability in BookStack versions prior to v22.09 allows a remote authenticated attacker to inject an arbitrary scripbookstackapp · bookstack · CWE-79 XSS	Orta5,4	—	%0,7	24 Eki 2022
21İzleyin	CVE-2021-3767İstismar yok	Cross-site Scripting (XSS) - Stored in bookstackapp/bookstackbookstackapp · bookstack · CWE-79 XSS	Orta5,4	—	%0,6	6 Eyl 2021
21İzleyin	CVE-2021-3768İstismar yok	Cross-site Scripting (XSS) - Stored in bookstackapp/bookstackbookstackapp · bookstack · CWE-79 XSS	Orta5,4	—	%0,6	6 Eyl 2021
17İzleyin	CVE-2021-4026İstismar yok	Improper Access Control in bookstackapp/bookstackbookstackapp · bookstack · CWE-284 Erişim denetimi (IDOR)	Orta4,3	—	%0,9	30 Kas 2021
9İzleyin	CVE-2023-4624İstismar yok	Server-Side Request Forgery (SSRF) in bookstackapp/bookstackbookstackapp · bookstack · CWE-918 SSRF	Düşük2,4	—	%0,6	30 Ağu 2023

CVE-2021-4119
47Planlayın
Improper Access Control in bookstackapp/bookstack
KritikCVSS 9,8İstismar yokEPSS %27
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
bookstackapp · bookstack15 Ara 2021
CVE-2020-5256
36İzleyin
Remote Code Execution Through Image Uploads in BookStack
YüksekCVSS 8,8İstismar yokEPSS %2
- RCE
bookstackapp · bookstack9 Mar 2020
CVE-2020-26210
34İzleyin
Cross-Site Scripting in BookStack
YüksekCVSS 8,7İstismar yokEPSS %1
- XSS
bookstackapp · bookstack3 Kas 2020
CVE-2020-26211
34İzleyin
Cross-Site Scripting in BookStack
YüksekCVSS 8,7İstismar yokEPSS %1
- XSS
bookstackapp · bookstack3 Kas 2020
CVE-2024-36676
30İzleyin
Incorrect access control in BookStack before v24.05.1 allows attackers to confirm existing system users and perform targeted notification em
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
- Hizmet dışı bırakma
9 Tem 2024
CVE-2021-3944
27İzleyin
Cross-Site Request Forgery (CSRF) in bookstackapp/bookstack
OrtaCVSS 6,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- CSRF
bookstackapp · bookstack2 Ara 2021
CVE-2023-6199
26İzleyin
Book Stack v23.10.2 - LFR via Blind SSRF
OrtaCVSS 6,5Kavram kanıtıEPSS %1
- SSRF
bookstackapp · bookstack20 Kas 2023
CVE-2021-3916
26İzleyin
Path Traversal in bookstackapp/bookstack
OrtaCVSS 6,5İstismar yokEPSS %1
- Yol geçişi
bookstackapp · bookstack5 Kas 2021
CVE-2021-3874
26İzleyin
Path Traversal in bookstackapp/bookstack
OrtaCVSS 6,5İstismar yokEPSS %1
- Yol geçişi
bookstackapp · bookstack15 Eki 2021
CVE-2021-3758
26İzleyin
Server-Side Request Forgery (SSRF) in bookstackapp/bookstack
OrtaCVSS 6,5İstismar yokEPSS %1
- SSRF
bookstackapp · bookstack2 Eyl 2021
CVE-2021-4194
26İzleyin
Improper Access Control in bookstackapp/bookstack
OrtaCVSS 6,5İstismar yokEPSS %1
- Erişim denetimi (IDOR)
bookstackapp · bookstack6 Oca 2022
CVE-2021-3906
26İzleyin
Unrestricted Upload of File with Dangerous Type in bookstackapp/bookstack
OrtaCVSS 6,5İstismar yokEPSS %1
- Dosya yükleme
bookstackapp · bookstack27 Eki 2021
CVE-2020-26260
25İzleyin
Server Side Request Forgery in BookStack
OrtaCVSS 6,4İstismar yokEPSS %1
bookstackapp · bookstack9 Ara 2020
CVE-2021-3915
22İzleyin
Unrestricted Upload of File with Dangerous Type in bookstackapp/bookstack
OrtaCVSS 5,7İstismar yokEPSS %1
- Dosya yükleme
bookstackapp · bookstack13 Kas 2021
CVE-2022-0877
21İzleyin
Cross-site Scripting (XSS) - Stored in bookstackapp/bookstack
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
bookstackapp · bookstack8 Mar 2022
CVE-2020-11055
21İzleyin
Cross-site Scripting in BookStack
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
bookstackapp · bookstack7 May 2020
CVE-2017-1000462
21İzleyin
BookStack version 0.18.4 is vulnerable to stored cross-site scripting, within the page creation page, which can result in disruption of serv
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
bookstackapp · bookstack3 Oca 2018
CVE-2022-40690
21İzleyin
Cross-site scripting vulnerability in BookStack versions prior to v22.09 allows a remote authenticated attacker to inject an arbitrary scrip
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
bookstackapp · bookstack24 Eki 2022
CVE-2021-3767
21İzleyin
Cross-site Scripting (XSS) - Stored in bookstackapp/bookstack
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
bookstackapp · bookstack6 Eyl 2021
CVE-2021-3768
21İzleyin
Cross-site Scripting (XSS) - Stored in bookstackapp/bookstack
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
bookstackapp · bookstack6 Eyl 2021
CVE-2021-4026
17İzleyin
Improper Access Control in bookstackapp/bookstack
OrtaCVSS 4,3İstismar yokEPSS %1
- Erişim denetimi (IDOR)
bookstackapp · bookstack30 Kas 2021
CVE-2023-4624
9İzleyin
Server-Side Request Forgery (SSRF) in bookstackapp/bookstack
DüşükCVSS 2,4İstismar yokEPSS %1
- SSRF
bookstackapp · bookstack30 Ağu 2023