PT-2020-16340 · Bookstack · Bookstack

Yassine Aboukir · Published 2020-11-03 · Updated 2020-11-16 · CVE-2020-26210

Positive Technologies (AI Summary)

CVSS v3.1

8.7

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions BookStack versions prior to 0.30.4

Description The issue allows a user with page edit permissions to add an attached link that executes untrusted JavaScript code when clicked by a viewer. This could lead to the execution of malicious code. Dangerous content may remain in the database even after updating.

Recommendations For versions prior to 0.30.4, upgrade to version 0.30.4 to fix the issue. As a temporary workaround, consider limiting page edit permissions to only trusted users, although this will not address existing exploitation of the issue. If you suspect exploitation, use the provided SQL query to test for dangerous content in the database.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-26210

GHSA-7P2J-4H6P-CQ3H

Affected Products

Bookstack

References · 7

• 🔥 https://github.com/BookStackApp/BookStack/security/advisories/GHSA-7p2j-4h6p-cq3h · Exploit
• 🔥 https://bookstackapp.com/blog/beta-release-v0-30-4 · Exploit
• https://github.com/BookStackApp/BookStack/commit/349162ea139556b2d25e09e155cec84e21cc9227 · Patch
• https://osv.dev/vulnerability/CVE-2020-26210 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-26210 · Security Note
• https://github.com/BookStackApp/BookStack/releases/tag/v0.30.4 · Note
• https://t.me/cvenotify/5612 · Telegram Post