CVE-2022-40690

Mô tả

Tham khảo

• jvn.jp/en/jp/JVN78862034/index.html · Release Notes
• bookstackapp.com/blog/bookstack-release-v22-09 · Release Notes
• bookstackapp.com/docs/admin/security · Vendor Advisory

Lỗ hổng khác của bookstack

• CVE-2023-6199TRUNG BÌNH 6.5Book Stack version 23.10.2 allows filtering local files on the server. This is possible because the application is vulnerable to SSRF.
• CVE-2023-4624THẤP 2.4Server-Side Request Forgery (SSRF) in GitHub repository bookstackapp/bookstack prior to v23.08.
• CVE-2022-0877TRUNG BÌNH 5.4Cross-site Scripting (XSS) - Stored in GitHub repository bookstackapp/bookstack prior to v22.02.3.
• CVE-2021-4194TRUNG BÌNH 6.5bookstack is vulnerable to Improper Access Control
• CVE-2021-4119NGHIÊM TRỌNG 9.8bookstack is vulnerable to Improper Access Control