https://vulnerability.circl.lu/sightings/feed 2026-07-24T15:55:16.541917+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/b461448e-ba82-4c79-9c83-ca890cc8df7c/export 2026-07-24T15:55:16.561094+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "b461448e-ba82-4c79-9c83-ca890cc8df7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-26260", "type": "seen", "source": "https://t.me/cibsecurity/18275", "content": "\u203c CVE-2020-26260 \u203c\n\nBookStack is a platform for storing and organising information and documentation. In BookStack before version 0.30.5, a user with permissions to edit a page could set certain image URL's to manipulate functionality in the exporting system, which would allow them to make server side requests and/or have access to a wider scope of files within the BookStack file storage locations. The issue was addressed in BookStack v0.30.5. As a workaround, page edit permissions could be limited to only those that are trusted until you can upgrade.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-10T00:25:21.000000Z"} 2020-12-10T00:25:21+00:00 https://vulnerability.circl.lu/sighting/320e50c7-c2e9-4e15-a185-9413226a582e/export 2026-07-24T15:55:16.563200+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "320e50c7-c2e9-4e15-a185-9413226a582e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-26260", "type": "seen", "source": "https://t.me/cibsecurity/18255", "content": "\u203c CVE-2020-26260 \u203c\n\nBookStack is a platform for storing and organising information and documentation. In BookStack before version 0.30.5, a user with permissions to edit a page could set certain image URL's to manipulate functionality in the exporting system, which would allow them to make server side requests and/or have access to a wider scope of files within the BookStack file storage locations. The issue was addressed in BookStack v0.30.5. As a workaround, page edit permissions could be limited to only those that are trusted until you can upgrade.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-10T00:22:58.000000Z"} 2020-12-10T00:22:58+00:00 https://vulnerability.circl.lu/sighting/89c63741-9dc4-4da7-921e-8667f04a557a/export 2026-07-24T15:55:16.563322+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "89c63741-9dc4-4da7-921e-8667f04a557a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-26260", "type": "seen", "source": "https://t.me/cibsecurity/18236", "content": "\u203c CVE-2020-26260 \u203c\n\nBookStack is a platform for storing and organising information and documentation. In BookStack before version 0.30.5, a user with permissions to edit a page could set certain image URL's to manipulate functionality in the exporting system, which would allow them to make server side requests and/or have access to a wider scope of files within the BookStack file storage locations. The issue was addressed in BookStack v0.30.5. As a workaround, page edit permissions could be limited to only those that are trusted until you can upgrade.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T23:25:29.000000Z"} 2020-12-09T23:25:29+00:00 https://vulnerability.circl.lu/sighting/ab75e825-f057-4a6b-acf6-d9ee65981158/export 2026-07-24T15:55:16.563415+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ab75e825-f057-4a6b-acf6-d9ee65981158", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-26260", "type": "seen", "source": "https://t.me/cibsecurity/18216", "content": "\u203c CVE-2020-26260 \u203c\n\nBookStack is a platform for storing and organising information and documentation. In BookStack before version 0.30.5, a user with permissions to edit a page could set certain image URL's to manipulate functionality in the exporting system, which would allow them to make server side requests and/or have access to a wider scope of files within the BookStack file storage locations. The issue was addressed in BookStack v0.30.5. As a workaround, page edit permissions could be limited to only those that are trusted until you can upgrade.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T23:22:58.000000Z"} 2020-12-09T23:22:58+00:00 https://vulnerability.circl.lu/sighting/434cdb27-4fbd-479e-b0ca-ebea03c764ac/export 2026-07-24T15:55:16.563505+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "434cdb27-4fbd-479e-b0ca-ebea03c764ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-26260", "type": "seen", "source": "https://t.me/cibsecurity/18197", "content": "\u203c CVE-2020-26260 \u203c\n\nBookStack is a platform for storing and organising information and documentation. In BookStack before version 0.30.5, a user with permissions to edit a page could set certain image URL's to manipulate functionality in the exporting system, which would allow them to make server side requests and/or have access to a wider scope of files within the BookStack file storage locations. The issue was addressed in BookStack v0.30.5. As a workaround, page edit permissions could be limited to only those that are trusted until you can upgrade.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T22:53:00.000000Z"} 2020-12-09T22:53:00+00:00 https://vulnerability.circl.lu/sighting/c0c03690-cce4-4551-8fc2-e2e254d93b9b/export 2026-07-24T15:55:16.563599+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c0c03690-cce4-4551-8fc2-e2e254d93b9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-26260", "type": "seen", "source": "https://t.me/cibsecurity/18178", "content": "\u203c CVE-2020-26260 \u203c\n\nBookStack is a platform for storing and organising information and documentation. In BookStack before version 0.30.5, a user with permissions to edit a page could set certain image URL's to manipulate functionality in the exporting system, which would allow them to make server side requests and/or have access to a wider scope of files within the BookStack file storage locations. The issue was addressed in BookStack v0.30.5. As a workaround, page edit permissions could be limited to only those that are trusted until you can upgrade.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T22:35:39.000000Z"} 2020-12-09T22:35:39+00:00 https://vulnerability.circl.lu/sighting/2e6a034b-5206-4bbc-91b5-8f4f69c8542b/export 2026-07-24T15:55:16.563683+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "2e6a034b-5206-4bbc-91b5-8f4f69c8542b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-26260", "type": "seen", "source": "https://t.me/cibsecurity/18158", "content": "\u203c CVE-2020-26260 \u203c\n\nBookStack is a platform for storing and organising information and documentation. In BookStack before version 0.30.5, a user with permissions to edit a page could set certain image URL's to manipulate functionality in the exporting system, which would allow them to make server side requests and/or have access to a wider scope of files within the BookStack file storage locations. The issue was addressed in BookStack v0.30.5. As a workaround, page edit permissions could be limited to only those that are trusted until you can upgrade.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T22:32:34.000000Z"} 2020-12-09T22:32:34+00:00 https://vulnerability.circl.lu/sighting/e8c902df-7a24-4c34-bf42-df7866b10e19/export 2026-07-24T15:55:16.563766+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e8c902df-7a24-4c34-bf42-df7866b10e19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-26260", "type": "seen", "source": "https://t.me/cibsecurity/18141", "content": "\u203c CVE-2020-26260 \u203c\n\nBookStack is a platform for storing and organising information and documentation. In BookStack before version 0.30.5, a user with permissions to edit a page could set certain image URL's to manipulate functionality in the exporting system, which would allow them to make server side requests and/or have access to a wider scope of files within the BookStack file storage locations. The issue was addressed in BookStack v0.30.5. As a workaround, page edit permissions could be limited to only those that are trusted until you can upgrade.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T22:25:24.000000Z"} 2020-12-09T22:25:24+00:00 https://vulnerability.circl.lu/sighting/f10fe5d7-a563-4a38-aed1-b77b86545a01/export 2026-07-24T15:55:16.563847+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f10fe5d7-a563-4a38-aed1-b77b86545a01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-26260", "type": "seen", "source": "https://t.me/cibsecurity/18121", "content": "\u203c CVE-2020-26260 \u203c\n\nBookStack is a platform for storing and organising information and documentation. In BookStack before version 0.30.5, a user with permissions to edit a page could set certain image URL's to manipulate functionality in the exporting system, which would allow them to make server side requests and/or have access to a wider scope of files within the BookStack file storage locations. The issue was addressed in BookStack v0.30.5. As a workaround, page edit permissions could be limited to only those that are trusted until you can upgrade.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T22:23:05.000000Z"} 2020-12-09T22:23:05+00:00 https://vulnerability.circl.lu/sighting/514263ed-7b3a-429b-b4ed-ce746c5be1f0/export 2026-07-24T15:55:16.563927+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "514263ed-7b3a-429b-b4ed-ce746c5be1f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-26260", "type": "seen", "source": "https://t.me/cibsecurity/18102", "content": "\u203c CVE-2020-26260 \u203c\n\nBookStack is a platform for storing and organising information and documentation. In BookStack before version 0.30.5, a user with permissions to edit a page could set certain image URL's to manipulate functionality in the exporting system, which would allow them to make server side requests and/or have access to a wider scope of files within the BookStack file storage locations. The issue was addressed in BookStack v0.30.5. As a workaround, page edit permissions could be limited to only those that are trusted until you can upgrade.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T21:25:28.000000Z"} 2020-12-09T21:25:28+00:00