CVE-2022-40690

Description

Cross-site scripting vulnerability in BookStack versions prior to v22.09 allows a remote authenticated attacker to inject an arbitrary script.

Affected Platforms

Weakness Type

CWE-79, CWE-79

References

• https://jvn.jp/en/jp/JVN78862034/index.html
• https://www.bookstackapp.com/blog/bookstack-release-v22-09/
• https://www.bookstackapp.com/docs/admin/security/#using-bookstack-content-extern…
• https://jvn.jp/en/jp/JVN78862034/index.html
• https://www.bookstackapp.com/blog/bookstack-release-v22-09/
• https://www.bookstackapp.com/docs/admin/security/#using-bookstack-content-extern…