{"action":"Upgrade ssddanbrown/bookstack to 0.25.5 or later.","affected":[{"fixed":"0.25.5","introduced":"0"}],"component":"ssddanbrown/bookstack","cve_ids":["CVE-2020-5256"],"ecosystem":"Packagist","epss":0.01969,"exploited":false,"fixed_versions":["0.25.5"],"ghsa_id":"GHSA-g9rq-x4fj-f5hx","id":"tcs_01M5KF2JSXXNPRBW5MJK3V41P0","modified_at":"2026-07-08T06:29:09.557145742Z","published_at":"2020-03-13T20:21:27Z","references":["https://osv.dev/vulnerability/GHSA-g9rq-x4fj-f5hx","https://github.com/BookStackApp/BookStack/security/advisories/GHSA-g9rq-x4fj-f5hx","https://nvd.nist.gov/vuln/detail/CVE-2020-5256","https://github.com/BookStackApp/BookStack/releases/tag/v0.25.3","https://github.com/BookStackApp/BookStack/releases/tag/v0.25.4","https://github.com/BookStackApp/BookStack/releases/tag/v0.25.5"],"severity":{"label":"high","score":7.9},"sources":[{"source":"osv","source_id":"GHSA-g9rq-x4fj-f5hx","url":"https://osv.dev/vulnerability/GHSA-g9rq-x4fj-f5hx"}],"summary":"Remote Code Execution Through Image Uploads in BookStack"}