{"metadata": {"vulnerability": "CVE-2020-26260", "count": 25, "kinds": {"milestone": 3, "sighting": 15, "kev": 0, "other": 7}}, "data": [{"timestamp": "2020-10-01T00:00:00Z", "date_only": false, "value": "2020-10-01T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-26260", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-12-09T16:20:14Z", "date_only": false, "value": "2020-12-09T16:20:14.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-26260", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-12-09T16:20:14Z", "date_only": false, "value": "2020-12-09T16:20:14.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2020-26260", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-12-09T17:15:00Z", "date_only": false, "value": "2020-12-09T17:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-26260", "record": "GSD-2020-26260", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-12-09T17:15:30.477Z", "date_only": false, "value": "2020-12-09T17:15:30.477", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-26260", "record": "FKIE_CVE-2020-26260", "field": "published"}, {"timestamp": "2020-12-09T20:32:56Z", "date_only": false, "value": "2020-12-09T20:32:56.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/18005", "record": "CVE-2020-26260", "field": "creation_timestamp", "uuid": "a1b7b845-d56a-4dee-ab16-db994ef2867e", "content": "\u203c CVE-2020-26260 \u203c\n\nBookStack is a platform for storing and organising information and documentation. In BookStack before version 0.30.5, a user with permissions to edit a page could set certain image URL's to manipulate functionality in the exporting system, which would allow them to make server side requests and/or have access to a wider scope of files within the BookStack file storage locations. The issue was addressed in BookStack v0.30.5. As a workaround, page edit permissions could be limited to only those that are trusted until you can upgrade.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/18005"}, {"timestamp": "2020-12-09T20:35:56Z", "date_only": false, "value": "2020-12-09T20:35:56.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/18025", "record": "CVE-2020-26260", "field": "creation_timestamp", "uuid": "9117d07a-4f49-44fc-8917-180bfeed9443", "content": "\u203c CVE-2020-26260 \u203c\n\nBookStack is a platform for storing and organising information and documentation. In BookStack before version 0.30.5, a user with permissions to edit a page could set certain image URL's to manipulate functionality in the exporting system, which would allow them to make server side requests and/or have access to a wider scope of files within the BookStack file storage locations. The issue was addressed in BookStack v0.30.5. As a workaround, page edit permissions could be limited to only those that are trusted until you can upgrade.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/18025"}, {"timestamp": "2020-12-09T20:44:51Z", "date_only": false, "value": "2020-12-09T20:44:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/18044", "record": "CVE-2020-26260", "field": "creation_timestamp", "uuid": "9f6d01b4-0450-4016-9637-a20867a38655", "content": "\u203c CVE-2020-26260 \u203c\n\nBookStack is a platform for storing and organising information and documentation. In BookStack before version 0.30.5, a user with permissions to edit a page could set certain image URL's to manipulate functionality in the exporting system, which would allow them to make server side requests and/or have access to a wider scope of files within the BookStack file storage locations. The issue was addressed in BookStack v0.30.5. As a workaround, page edit permissions could be limited to only those that are trusted until you can upgrade.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/18044"}, {"timestamp": "2020-12-09T21:02:34Z", "date_only": false, "value": "2020-12-09T21:02:34.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/18063", "record": "CVE-2020-26260", "field": "creation_timestamp", "uuid": "f822ff2e-8028-43db-9770-4fc7e8a86924", "content": "\u203c CVE-2020-26260 \u203c\n\nBookStack is a platform for storing and organising information and documentation. In BookStack before version 0.30.5, a user with permissions to edit a page could set certain image URL's to manipulate functionality in the exporting system, which would allow them to make server side requests and/or have access to a wider scope of files within the BookStack file storage locations. The issue was addressed in BookStack v0.30.5. As a workaround, page edit permissions could be limited to only those that are trusted until you can upgrade.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/18063"}, {"timestamp": "2020-12-09T21:23:04Z", "date_only": false, "value": "2020-12-09T21:23:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/18082", "record": "CVE-2020-26260", "field": "creation_timestamp", "uuid": "4b29109d-6534-4bdf-88e6-fbfd74f2cc16", "content": "\u203c CVE-2020-26260 \u203c\n\nBookStack is a platform for storing and organising information and documentation. In BookStack before version 0.30.5, a user with permissions to edit a page could set certain image URL's to manipulate functionality in the exporting system, which would allow them to make server side requests and/or have access to a wider scope of files within the BookStack file storage locations. The issue was addressed in BookStack v0.30.5. As a workaround, page edit permissions could be limited to only those that are trusted until you can upgrade.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/18082"}, {"timestamp": "2020-12-09T21:25:28Z", "date_only": false, "value": "2020-12-09T21:25:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/18102", "record": "CVE-2020-26260", "field": "creation_timestamp", "uuid": "514263ed-7b3a-429b-b4ed-ce746c5be1f0", "content": "\u203c CVE-2020-26260 \u203c\n\nBookStack is a platform for storing and organising information and documentation. In BookStack before version 0.30.5, a user with permissions to edit a page could set certain image URL's to manipulate functionality in the exporting system, which would allow them to make server side requests and/or have access to a wider scope of files within the BookStack file storage locations. The issue was addressed in BookStack v0.30.5. As a workaround, page edit permissions could be limited to only those that are trusted until you can upgrade.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/18102"}, {"timestamp": "2020-12-09T22:23:05Z", "date_only": false, "value": "2020-12-09T22:23:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/18121", "record": "CVE-2020-26260", "field": "creation_timestamp", "uuid": "f10fe5d7-a563-4a38-aed1-b77b86545a01", "content": "\u203c CVE-2020-26260 \u203c\n\nBookStack is a platform for storing and organising information and documentation. In BookStack before version 0.30.5, a user with permissions to edit a page could set certain image URL's to manipulate functionality in the exporting system, which would allow them to make server side requests and/or have access to a wider scope of files within the BookStack file storage locations. The issue was addressed in BookStack v0.30.5. As a workaround, page edit permissions could be limited to only those that are trusted until you can upgrade.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/18121"}, {"timestamp": "2020-12-09T22:25:24Z", "date_only": false, "value": "2020-12-09T22:25:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/18141", "record": "CVE-2020-26260", "field": "creation_timestamp", "uuid": "e8c902df-7a24-4c34-bf42-df7866b10e19", "content": "\u203c CVE-2020-26260 \u203c\n\nBookStack is a platform for storing and organising information and documentation. In BookStack before version 0.30.5, a user with permissions to edit a page could set certain image URL's to manipulate functionality in the exporting system, which would allow them to make server side requests and/or have access to a wider scope of files within the BookStack file storage locations. The issue was addressed in BookStack v0.30.5. As a workaround, page edit permissions could be limited to only those that are trusted until you can upgrade.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/18141"}, {"timestamp": "2020-12-09T22:32:34Z", "date_only": false, "value": "2020-12-09T22:32:34.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/18158", "record": "CVE-2020-26260", "field": "creation_timestamp", "uuid": "2e6a034b-5206-4bbc-91b5-8f4f69c8542b", "content": "\u203c CVE-2020-26260 \u203c\n\nBookStack is a platform for storing and organising information and documentation. In BookStack before version 0.30.5, a user with permissions to edit a page could set certain image URL's to manipulate functionality in the exporting system, which would allow them to make server side requests and/or have access to a wider scope of files within the BookStack file storage locations. The issue was addressed in BookStack v0.30.5. As a workaround, page edit permissions could be limited to only those that are trusted until you can upgrade.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/18158"}, {"timestamp": "2020-12-09T22:35:39Z", "date_only": false, "value": "2020-12-09T22:35:39.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/18178", "record": "CVE-2020-26260", "field": "creation_timestamp", "uuid": "c0c03690-cce4-4551-8fc2-e2e254d93b9b", "content": "\u203c CVE-2020-26260 \u203c\n\nBookStack is a platform for storing and organising information and documentation. In BookStack before version 0.30.5, a user with permissions to edit a page could set certain image URL's to manipulate functionality in the exporting system, which would allow them to make server side requests and/or have access to a wider scope of files within the BookStack file storage locations. The issue was addressed in BookStack v0.30.5. As a workaround, page edit permissions could be limited to only those that are trusted until you can upgrade.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/18178"}, {"timestamp": "2020-12-09T22:53:00Z", "date_only": false, "value": "2020-12-09T22:53:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/18197", "record": "CVE-2020-26260", "field": "creation_timestamp", "uuid": "434cdb27-4fbd-479e-b0ca-ebea03c764ac", "content": "\u203c CVE-2020-26260 \u203c\n\nBookStack is a platform for storing and organising information and documentation. In BookStack before version 0.30.5, a user with permissions to edit a page could set certain image URL's to manipulate functionality in the exporting system, which would allow them to make server side requests and/or have access to a wider scope of files within the BookStack file storage locations. The issue was addressed in BookStack v0.30.5. As a workaround, page edit permissions could be limited to only those that are trusted until you can upgrade.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/18197"}, {"timestamp": "2020-12-09T23:22:58Z", "date_only": false, "value": "2020-12-09T23:22:58.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/18216", "record": "CVE-2020-26260", "field": "creation_timestamp", "uuid": "ab75e825-f057-4a6b-acf6-d9ee65981158", "content": "\u203c CVE-2020-26260 \u203c\n\nBookStack is a platform for storing and organising information and documentation. In BookStack before version 0.30.5, a user with permissions to edit a page could set certain image URL's to manipulate functionality in the exporting system, which would allow them to make server side requests and/or have access to a wider scope of files within the BookStack file storage locations. The issue was addressed in BookStack v0.30.5. As a workaround, page edit permissions could be limited to only those that are trusted until you can upgrade.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/18216"}, {"timestamp": "2020-12-09T23:25:29Z", "date_only": false, "value": "2020-12-09T23:25:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/18236", "record": "CVE-2020-26260", "field": "creation_timestamp", "uuid": "89c63741-9dc4-4da7-921e-8667f04a557a", "content": "\u203c CVE-2020-26260 \u203c\n\nBookStack is a platform for storing and organising information and documentation. In BookStack before version 0.30.5, a user with permissions to edit a page could set certain image URL's to manipulate functionality in the exporting system, which would allow them to make server side requests and/or have access to a wider scope of files within the BookStack file storage locations. The issue was addressed in BookStack v0.30.5. As a workaround, page edit permissions could be limited to only those that are trusted until you can upgrade.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/18236"}, {"timestamp": "2020-12-10T00:22:58Z", "date_only": false, "value": "2020-12-10T00:22:58.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/18255", "record": "CVE-2020-26260", "field": "creation_timestamp", "uuid": "320e50c7-c2e9-4e15-a185-9413226a582e", "content": "\u203c CVE-2020-26260 \u203c\n\nBookStack is a platform for storing and organising information and documentation. In BookStack before version 0.30.5, a user with permissions to edit a page could set certain image URL's to manipulate functionality in the exporting system, which would allow them to make server side requests and/or have access to a wider scope of files within the BookStack file storage locations. The issue was addressed in BookStack v0.30.5. As a workaround, page edit permissions could be limited to only those that are trusted until you can upgrade.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/18255"}, {"timestamp": "2020-12-10T00:25:21Z", "date_only": false, "value": "2020-12-10T00:25:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/18275", "record": "CVE-2020-26260", "field": "creation_timestamp", "uuid": "b461448e-ba82-4c79-9c83-ca890cc8df7c", "content": "\u203c CVE-2020-26260 \u203c\n\nBookStack is a platform for storing and organising information and documentation. In BookStack before version 0.30.5, a user with permissions to edit a page could set certain image URL's to manipulate functionality in the exporting system, which would allow them to make server side requests and/or have access to a wider scope of files within the BookStack file storage locations. The issue was addressed in BookStack v0.30.5. As a workaround, page edit permissions could be limited to only those that are trusted until you can upgrade.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/18275"}, {"timestamp": "2020-12-10T22:51:00Z", "date_only": false, "value": "2020-12-10T22:51Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-26260", "record": "GSD-2020-26260", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:22:09.059Z", "date_only": false, "value": "2023-12-13T01:22:09.059816Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-26260", "record": "GSD-2020-26260", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-04T15:56:04.938Z", "date_only": false, "value": "2024-08-04T15:56:04.938Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-26260", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T15:56:04.938Z", "date_only": false, "value": "2024-08-04T15:56:04.938Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2020-26260", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T03:07:56.707Z", "date_only": false, "value": "2026-06-17T03:07:56.707", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-26260", "record": "FKIE_CVE-2020-26260", "field": "lastModified"}]}