CVE-2026-116020mediumCWE-863

CVE-2026-116020: fallo de gravedad media en BookStackApp BookStack

BookStack before 26.09.2 Incorrect Authorization via AttachmentController on Draft Pages

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear BookStack

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.3epss 0.2%
BookStack before 26.09.2 contains an incorrect authorization vulnerability in AttachmentController that allows authenticated users to access other users' draft page attachments by ID. Attackers with attachment permissions can enumerate sequential attachment IDs to download, rename, relink, or replace files on another user's unpublished draft pages.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Productos afectados
BookStackApp · BookStack
CVEs relacionadas — BookStackApp BookStack

En el mismo producto, de las más peligrosas a las menos.

CVE-2020-5256HIGHRemote Code Execution Through Image Uploads in BookStackEPSS 2.0%CVE-2020-26210HIGHCross-Site Scripting in BookStackEPSS 1.2%CVE-2020-26211HIGHCross-Site Scripting in BookStackEPSS 1.1%CVE-2020-26260MEDIUMServer Side Request Forgery in BookStackEPSS 0.8%CVE-2020-11055MEDIUMCross-site Scripting in BookStackEPSS 0.8%CVE-2026-67204MEDIUMBookStack < 26.05.4 Broken Access Control via Image Gallery APIEPSS 0.4%