Linkstack
Monthly
Cross-site request forgery in LinkStack (linkstackorg:linkstack) affects all versions up to and including 4.8.8 and lets a remote, unauthenticated attacker cause a logged-in user's browser to submit state-changing requests against the instance. Exploitation depends on an authenticated victim with an active session being tricked into interacting with attacker-controlled content, so a successful attack yields only a low integrity impact on LinkStack itself, with no confidentiality or availability effect. No vendor patch or advisory has been issued - the maintainers were contacted about the disclosure and did not respond - and no public exploit code or proof-of-concept has been identified at time of analysis; the reported CVSS 4.0 score of 5.3 and the this_month priority label place this as a moderate, non-urgent item to schedule rather than an emergency.
LinkStack up to version 4.8.6 contains an authorization bypass vulnerability in the saveLink function of UserController.php that allows authenticated attackers to modify links belonging to other users via insecure direct object references (IDOR). The vulnerability affects the Management Endpoint and enables remote attackers with valid credentials to manipulate or delete arbitrary user links, with publicly available exploit code and an unmerged patch awaiting acceptance.
Stored cross-site scripting (XSS) in LinkStack up to version 4.8.6 allows authenticated users to inject malicious scripts via the pageDescription parameter in the editPage function, which are then stored and executed in the browsers of users viewing the affected page. The vulnerability requires user interaction (victim must view the page) and authenticated access, limiting its scope to authenticated attackers, but publicly available exploit code exists and the vendor has provided a fix via pull request #974.
LinkStack 2.7.9 through 4.7.7 allows resources\views\components\favicon.blade.php link SSRF. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Weak Password Recovery Mechanism for Forgotten Password in GitHub repository linkstackorg/linkstack prior to v4.2.9. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Insufficient Session Expiration in GitHub repository linkstackorg/linkstack prior to v4.2.9. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Cross-site request forgery in LinkStack (linkstackorg:linkstack) affects all versions up to and including 4.8.8 and lets a remote, unauthenticated attacker cause a logged-in user's browser to submit state-changing requests against the instance. Exploitation depends on an authenticated victim with an active session being tricked into interacting with attacker-controlled content, so a successful attack yields only a low integrity impact on LinkStack itself, with no confidentiality or availability effect. No vendor patch or advisory has been issued - the maintainers were contacted about the disclosure and did not respond - and no public exploit code or proof-of-concept has been identified at time of analysis; the reported CVSS 4.0 score of 5.3 and the this_month priority label place this as a moderate, non-urgent item to schedule rather than an emergency.
LinkStack up to version 4.8.6 contains an authorization bypass vulnerability in the saveLink function of UserController.php that allows authenticated attackers to modify links belonging to other users via insecure direct object references (IDOR). The vulnerability affects the Management Endpoint and enables remote attackers with valid credentials to manipulate or delete arbitrary user links, with publicly available exploit code and an unmerged patch awaiting acceptance.
Stored cross-site scripting (XSS) in LinkStack up to version 4.8.6 allows authenticated users to inject malicious scripts via the pageDescription parameter in the editPage function, which are then stored and executed in the browsers of users viewing the affected page. The vulnerability requires user interaction (victim must view the page) and authenticated access, limiting its scope to authenticated attackers, but publicly available exploit code exists and the vendor has provided a fix via pull request #974.
LinkStack 2.7.9 through 4.7.7 allows resources\views\components\favicon.blade.php link SSRF. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Weak Password Recovery Mechanism for Forgotten Password in GitHub repository linkstackorg/linkstack prior to v4.2.9. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Insufficient Session Expiration in GitHub repository linkstackorg/linkstack prior to v4.2.9. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.