CVE-2022-0877
1 advisory.
Packagist/ssddanbrown/bookstack CVE-2022-0877: medium 5.4, EPSS 0.78%
Cross-site Scripting in BookStack
Action: Upgrade ssddanbrown/bookstack to 22.02.3 or later.
composer require ssddanbrown/bookstack:22.02.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 22.02.3 | - |
Fixed versions
| 22.02.3 |
Sources
- osv: GHSA-5rcc-6cmj-7728
- https://nvd.nist.gov/vuln/detail/CVE-2022-0877
- https://github.com/bookstackapp/bookstack/commit/856fca8289b7370cafa033ea21c408e7d4303fd6
- https://github.com/bookstackapp/bookstack
- https://huntr.dev/bounties/b04df4e3-ae5a-4dc6-81ec-496248b15f3c
CVE-2022-0877 · published · modified · JSON