Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

bookstackapp Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-89022`BookStack < 26.05.5 Authentication Bypass via Social Login Provider Confusion	Exploitation statusNot confirmed	FixYes	Affected productbookstack	Published09/15/2026	SeverityCritical
`CVE-2026-84695`BookStack before 26.05.4 Stored XSS via Drawing Upload	Exploitation statusNot known exploited	FixYes	Affected productbookstack	Published09/02/2026	SeverityCritical
`CVE-2026-82450`BookStack before 26.05.4 Remote Code Execution via Book Cover	Exploitation statusNot known exploited	FixYes	Affected productbookstack	Published08/29/2026	SeverityHigh
`CVE-2026-67204`BookStack < 26.05.4 Broken Access Control via Image Gallery API	Exploitation statusNot known exploited	FixYes	Affected productbookstack	Published08/24/2026	SeverityMedium
`CVE-2026-5484`BookStackApp BookStack Chapter Export ExportFormatter.php chapterToMarkdown access control	Exploitation statusPublic exploit	FixYes	Affected productbookstack	Published04/03/2026	SeverityMedium
`CVE-2023-6199`Book Stack v23.10.2 - LFR via Blind SSRF	Exploitation statusNot confirmed	FixNot confirmed	Affected productBookStack	Published11/20/2023	SeverityMedium
`CVE-2023-4624`Server-Side Request Forgery (SSRF) in bookstackapp/bookstack	Exploitation statusPublic exploit	FixYes	Affected productbookstackapp/bookstack	Published08/30/2023	SeverityLow
`CVE-2022-40690`	Exploitation statusNot known exploited	FixNot confirmed	Affected productBookStack	Published10/24/2022	SeverityMedium
`CVE-2022-0877`Cross-site Scripting (XSS) - Stored in bookstackapp/bookstack	Exploitation statusNot confirmed	FixYes	Affected productbookstackapp/bookstack	Published03/08/2022	SeverityHigh
`CVE-2021-4194`Improper Access Control in bookstackapp/bookstack	Exploitation statusNot confirmed	FixYes	Affected productbookstackapp/bookstack	Published01/06/2022	SeverityMedium
`CVE-2021-4119`Improper Access Control in bookstackapp/bookstack	Exploitation statusNot confirmed	FixYes	Affected productbookstackapp/bookstack	Published12/15/2021	SeverityMedium
`CVE-2021-3944`Cross-Site Request Forgery (CSRF) in bookstackapp/bookstack	Exploitation statusNot confirmed	FixYes	Affected productbookstackapp/bookstack	Published12/02/2021	SeverityLow
`CVE-2021-4026`Improper Access Control in bookstackapp/bookstack	Exploitation statusNot confirmed	FixYes	Affected productbookstackapp/bookstack	Published11/30/2021	SeverityMedium
`CVE-2021-3915`Unrestricted Upload of File with Dangerous Type in bookstackapp/bookstack	Exploitation statusNot confirmed	FixYes	Affected productbookstackapp/bookstack	Published11/13/2021	SeverityHigh
`CVE-2021-3916`Path Traversal in bookstackapp/bookstack	Exploitation statusNot confirmed	FixYes	Affected productbookstackapp/bookstack	Published11/05/2021	SeverityMedium
`CVE-2021-3906`Unrestricted Upload of File with Dangerous Type in bookstackapp/bookstack	Exploitation statusNot confirmed	FixYes	Affected productbookstackapp/bookstack	Published10/27/2021	SeverityMedium
`CVE-2021-3874`Path Traversal in bookstackapp/bookstack	Exploitation statusNot confirmed	FixYes	Affected productbookstackapp/bookstack	Published10/15/2021	SeverityMedium
`CVE-2021-3768`Cross-site Scripting (XSS) - Stored in bookstackapp/bookstack	Exploitation statusNot confirmed	FixYes	Affected productbookstackapp/bookstack	Published09/06/2021	SeverityMedium
`CVE-2021-3767`Cross-site Scripting (XSS) - Stored in bookstackapp/bookstack	Exploitation statusNot confirmed	FixYes	Affected productbookstackapp/bookstack	Published09/06/2021	SeverityMedium
`CVE-2021-3758`Server-Side Request Forgery (SSRF) in bookstackapp/bookstack	Exploitation statusNot confirmed	FixYes	Affected productbookstackapp/bookstack	Published09/02/2021	SeverityMedium
`CVE-2020-26260`Server Side Request Forgery in BookStack	Exploitation statusNot confirmed	FixNot confirmed	Affected productbookstack	Published12/09/2020	SeverityMedium
`CVE-2020-26211`Cross-Site Scripting in BookStack	Exploitation statusNot confirmed	FixYes	Affected productbookstack	Published11/03/2020	SeverityHigh
`CVE-2020-26210`Cross-Site Scripting in BookStack	Exploitation statusNot confirmed	FixYes	Affected productbookstack	Published11/03/2020	SeverityHigh
`CVE-2020-11055`Cross-site Scripting in BookStack	Exploitation statusNot confirmed	FixYes	Affected productbookstack	Published05/07/2020	SeverityMedium
`CVE-2020-5256`Remote Code Execution Through Image Uploads in BookStack	Exploitation statusNot confirmed	FixNot confirmed	Affected productbookstack	Published03/09/2020	SeverityHigh
`CVE-2017-1000462`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published01/03/2018	SeverityUnknown

26 / 26 Results

All vulnerabilities loaded

Security vulnerabilities from bookstackapp

bookstackapp

How many security vulnerabilities does bookstackapp have?

Which bookstackapp product has the most security vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management

Popular bookstackapp products

bookstackapp/bookstack

bookstack