PT-2020-16384 · Bookstack · Bookstack

Percussiveelbow · Published 2020-12-09 · Updated 2020-12-11 · CVE-2020-26260

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions BookStack versions prior to 0.30.5

Description BookStack is a platform for storing and organizing information and documentation. A user with permissions to edit a page could set certain image URL's to manipulate functionality in the exporting system, which would allow them to make server-side requests and/or have access to a wider scope of files within the BookStack file storage locations.

Recommendations For versions prior to 0.30.5, upgrade to BookStack v0.30.5 to address the issue. As a temporary workaround, consider limiting page edit permissions to only those that are trusted until you can upgrade.

Fix

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

CVE-2020-26260

GHSA-8WFC-W2R5-X7CR

Affected Products

Bookstack

References · 21

• https://osv.dev/vulnerability/CVE-2020-26260 · Vendor Advisory
• https://bookstackapp.com/blog/beta-release-v0-30-5 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-26260 · Security Note
• https://github.com/BookStackApp/BookStack/security/advisories/GHSA-8wfc-w2r5-x7cr · Note
• https://github.com/BookStackApp/BookStack/releases/tag/v0.30.5 · Note
• https://t.me/cibsecurity/18121 · Telegram Post
• https://t.me/cibsecurity/18197 · Telegram Post
• https://t.me/cibsecurity/18025 · Telegram Post
• https://t.me/cibsecurity/18102 · Telegram Post
• https://t.me/cibsecurity/18255 · Telegram Post
• https://t.me/cibsecurity/18082 · Telegram Post
• https://t.me/cibsecurity/18005 · Telegram Post
• https://t.me/cibsecurity/18063 · Telegram Post
• https://t.me/cibsecurity/18044 · Telegram Post
• https://t.me/cibsecurity/18178 · Telegram Post