CVE-2023-6199

概要

参考情報

• fluidattacks.com/advisories/imagination · Exploit
• bookstackapp.com/blog/bookstack-release-v23-10-3 · Product

bookstack のその他の脆弱性

• CVE-2023-4624低 2.4Server-Side Request Forgery (SSRF) in GitHub repository bookstackapp/bookstack prior to v23.08.
• CVE-2022-40690中 5.4Cross-site scripting vulnerability in BookStack versions prior to v22.09 allows a remote authenticated attacker to inject an arbitrary scrip…
• CVE-2022-0877中 5.4Cross-site Scripting (XSS) - Stored in GitHub repository bookstackapp/bookstack prior to v22.02.3.
• CVE-2021-4194中 6.5bookstack is vulnerable to Improper Access Control
• CVE-2021-4119緊急 9.8bookstack is vulnerable to Improper Access Control