CVE-2023-4624

Description

References

• bookstackapp/bookstack commit c324ad9 · Vendor Advisory
• huntr.dev/bounties/9ce5cef6-e546-44e7-addf-a2726fa4e60c · Exploit

Más vulnerabilidades de bookstack

• CVE-2023-6199MEDIO 6.5Book Stack version 23.10.2 allows filtering local files on the server. This is possible because the application is vulnerable to SSRF.
• CVE-2022-40690MEDIO 5.4Cross-site scripting vulnerability in BookStack versions prior to v22.09 allows a remote authenticated attacker to inject an arbitrary scrip…
• CVE-2022-0877MEDIO 5.4Cross-site Scripting (XSS) - Stored in GitHub repository bookstackapp/bookstack prior to v22.02.3.
• CVE-2021-4194MEDIO 6.5bookstack is vulnerable to Improper Access Control
• CVE-2021-4119CRÍTICO 9.8bookstack is vulnerable to Improper Access Control