Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-03208
HistoryJan 08, 2022 - 12:00 a.m.

bookstack Access Control Error Vulnerability (CNVD-2022-03208)

2022-01-0800:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
bookstack
access control error
vulnerability
cnvd-2022-03208
network system
product
unauthorized access

EPSS

0.001

Percentile

21.8%

BookStack is the BookStackApp team’s set of open source platform for building wiki documents using PHP and Laravel. bookstack suffers from an access control error vulnerability that stems from a network system or product that does not properly restrict access to resources from unauthorized roles. An attacker could exploit the vulnerability to override access to resources that are not authorized to be accessed.

EPSS

0.001

Percentile

21.8%