Browse all 5 CVE security advisories affecting Bookgy. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Bookgy operates as a digital library management platform enabling organizations to catalog and distribute electronic resources. Historically, the application has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues, with five CVEs documented to date. Security assessments reveal that input validation weaknesses and improper access controls have been recurring concerns. While no major public security incidents have been reported, the consistent pattern of vulnerabilities suggests potential risks for organizations handling sensitive literary content. The platform's web interface and document processing functions appear particularly prone to exploitation, necessitating robust hardening measures for production deployments.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-40619 | Improper access control vulnerability in Bookgy — BookgyCWE-863 | 9.1AI | CriticalAI | 2025-04-29 |
| CVE-2025-40618 | SQL injection vulnerability in Bookgy — BookgyCWE-89 | 9.8AI | CriticalAI | 2025-04-29 |
| CVE-2025-40617 | SQL injection vulnerability in Bookgy — BookgyCWE-89 | 9.8AI | CriticalAI | 2025-04-29 |
| CVE-2025-40616 | Reflected Cross-Site Scripting (XSS) vulnerability in Bookgy — BookgyCWE-79 | 6.1AI | MediumAI | 2025-04-29 |
| CVE-2025-40615 | Reflected Cross-Site Scripting (XSS) vulnerability in Bookgy — BookgyCWE-79 | 6.1AI | MediumAI | 2025-04-29 |
This page lists every published CVE security advisory associated with Bookgy. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.