bookstackapp.com
Vulnerability disclosure program on security.txt bookstackapp.com
Accepting reports
security.txt
- Top reward
- No cash rewards
- Top severity paid
- Not published
- Assets in scope
- 1
- Public CVEs
- 21
- Last change
- No changes yet
At a glance
What to know before you start testing.
- No cash rewards
- A disclosure program: you report for credit, not money.
- Report by email
- https://www.bookstackapp.com/links/contact/
Rewards
What the company's own policy page says it pays.
This program does not pay cash rewards.
Scope
1 asset you may test.
Domains 1
- bookstackapp.com
Changes
Tracked since 12 Nov 2026. Last checked 2 hours ago.
No changes yet. When the rewards or scope move, you will see it here and in the RSS feed.
Public CVEs
Published vulnerabilities in this vendor's products, from the NVD.
| CVE | Summary | Severity | Published |
|---|---|---|---|
| CVE-2023-6199 | Book Stack version 23.10.2 allows filtering local files on the server. This is possible because the application is vulnerable to SSRF. | Medium 6.5 | 20 Nov 2023 |
| CVE-2023-4624 | Server-Side Request Forgery (SSRF) in GitHub repository bookstackapp/bookstack prior to v23.08. | Low 2.4 | 30 Aug 2023 |
| CVE-2022-40690 | Cross-site scripting vulnerability in BookStack versions prior to v22.09 allows a remote authenticated attacker to inject an arbitrary script. | Medium 5.4 | 24 Oct 2022 |
| CVE-2022-0877 | Cross-site Scripting (XSS) - Stored in GitHub repository bookstackapp/bookstack prior to v22.02.3. | Medium 5.4 | 8 Mar 2022 |
| CVE-2021-4194 | bookstack is vulnerable to Improper Access Control | Medium 6.5 | 6 Jan 2022 |
| CVE-2021-4119 | bookstack is vulnerable to Improper Access Control | Critical 9.8 | 15 Dec 2021 |
| CVE-2021-3944 | bookstack is vulnerable to Cross-Site Request Forgery (CSRF) | Medium 6.8 | 2 Dec 2021 |
| CVE-2021-4026 | bookstack is vulnerable to Improper Access Control | Medium 4.3 | 30 Nov 2021 |
| CVE-2021-3915 | bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type | Medium 5.7 | 13 Nov 2021 |
| CVE-2021-3916 | bookstack is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | Medium 6.5 | 5 Nov 2021 |
| CVE-2021-3906 | bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type | Medium 6.5 | 27 Oct 2021 |
| CVE-2021-3874 | bookstack is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | Medium 6.5 | 15 Oct 2021 |
| CVE-2021-3768 | bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | 6 Sep 2021 |
| CVE-2021-3767 | bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | 6 Sep 2021 |
| CVE-2021-3758 | bookstack is vulnerable to Server-Side Request Forgery (SSRF) | Medium 6.5 | 2 Sep 2021 |
| CVE-2020-26260 | BookStack is a platform for storing and organising information and documentation. In BookStack before version 0.30.5, a user with permissions to edit a page could set certain image URL's to manipulate functionality in the exporting system, which would allow them to make server side requests and/or have access to a wider scope of files within the BookStack file storage locations. The issue was addr | Medium 6.4 | 9 Dec 2020 |
| CVE-2020-26211 | In BookStack before version 0.30.4, a user with permissions to edit a page could insert JavaScript code through the use of `javascript:` URIs within a link or form which would run, within the context of the current page, when clicked or submitted. Additionally, a user with permissions to edit a page could insert a particular meta tag which could be used to silently redirect users to a alternative | High 7.7 | 3 Nov 2020 |
| CVE-2020-26210 | In BookStack before version 0.30.4, a user with permissions to edit a page could add an attached link which would execute untrusted JavaScript code when clicked by a viewer of the page. Dangerous content may remain in the database after this update. If you think this could have been exploited the linked advisory provides a SQL query to test. As a workaround, page edit permissions could be limited | High 7.7 | 3 Nov 2020 |
| CVE-2020-11055 | In BookStack greater than or equal to 0.18.0 and less than 0.29.2, there is an XSS vulnerability in comment creation. A user with permission to create comments could POST HTML directly to the system to be saved in a comment, which would then be executed/displayed to others users viewing the comment. Through this vulnerability custom JavaScript code could be injected and therefore ran on other user | Medium 6.3 | 7 May 2020 |
| CVE-2020-5256 | BookStack before version 0.25.5 has a vulnerability where a user could upload PHP files through image upload functions, which would allow them to execute code on the host system remotely. They would then have the permissions of the PHP process. This most impacts scenarios where non-trusted users are given permission to upload images in any area of the application. The issue was addressed in a seri | High 7.9 | 9 Mar 2020 |
| CVE-2017-1000462 | BookStack version 0.18.4 is vulnerable to stored cross-site scripting, within the page creation page, which can result in disruption of service and execution of javascript code. | Medium 5.4 | 3 Jan 2018 |