Vulnerability · Published Mar 9, 2020 · Assigned by GitHub_M
CVE-2020-5256Remote Code Execution Through Image Uploads in BookStack
High 7.9
In plain English
A high-severity security flaw in BookStack from BookStackApp. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.0% (higher than 80% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
BookStack before version 0.25.5 has a vulnerability where a user could upload PHP files through image upload functions, which would allow them to execute code on the host system remotely. They would then have the permissions of the PHP process. This most impacts scenarios where non-trusted users are given permission to upload images in any area of the application. The issue was addressed in a series of patches in versions 0.25.3, 0.25.4 and 0.25.5. Users should upgrade to at least v0.25.5 to avoid this vulnerability.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Packagist | ssddanbrown/bookstack | 0.25.5 | GHSA-g9rq-x4fj-f5hx |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| BookStackApp | BookStack | < 0.25.5 |
Weakness: CWE-95 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L
References
- https://github.com/BookStackApp/BookStack/security/advisories/GHSA-g9rq-x4fj-f5hx x_refsource_CONFIRM
- https://github.com/BookStackApp/BookStack/releases/tag/v0.25.3 x_refsource_MISC
- https://github.com/BookStackApp/BookStack/releases/tag/v0.25.4 x_refsource_MISC
- https://github.com/BookStackApp/BookStack/releases/tag/v0.25.5 x_refsource_MISC