212 matches found
BookStack 安全漏洞
BookStack is an open source set of BookStackApp Bookstackapp team's platform for building wiki documents using PHP and Laravel.BookStack suffers from an access control error vulnerability that makes it vulnerable to improper access control. No detailed vulnerability details are currently availabl...
PT-2021-23163 · Bookstack · Bookstack
Name of the Vulnerable Software and Affected Versions: BookStack versions prior to 21.11.3 Description: The issue allows a logged-in user with no privileges or a guest user if public access is enabled to access the "/search/users/select" AJAX endpoint, which is meant for admins to manage audit...
bookstack is vulnerable to Cross-Site Request Forgery (CSRF)
bookstack is vulnerable to Cross-Site Request Forgery CSRF...
GHSA-WC7V-77JR-5C3M bookstack is vulnerable to Cross-Site Request Forgery (CSRF)
bookstack is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3944
bookstack is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3944
bookstack is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3944
bookstack is vulnerable to Cross-Site Request Forgery CSRF...
Cross site request forgery (csrf)
bookstack is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3944
CVE-2021-3944 affects BookStack. Multiple connected sources confirm a cross-site request forgery (CSRF) vulnerability in BookStack/BookStackApp, caused by insufficient CSRF validation. Documented details indicate the issue is CSRF without explicit exploitation vectors or patched versions in the p...
BookStack Access Control Error Vulnerability
BookStack is an open source set of BookStackApp Bookstackapp team's platform for building wiki documents using PHP and Laravel. bookstackapp suffers from an access control error vulnerability that stems from the fact that users with API access can view any attachments to which they do not have re...
BookStack 跨站请求伪造漏洞
BookStack is the BookStackApp team's open source platform for building wiki documents using PHP and Laravel. bookstack suffers from a cross-site request forgery vulnerability, which stems from the software's lack of validation for cross-site request forgery. An attacker could use this vulnerabili...
GHSA-JM6P-WFJG-XM7X bookstack is vulnerable to Improper Access Control
bookstack is vulnerable to Improper Access Control...
bookstack is vulnerable to Improper Access Control
bookstack is vulnerable to Improper Access Control...
CVE-2021-4026
bookstack is vulnerable to Improper Access Control...
CVE-2021-4026
bookstack is vulnerable to Improper Access Control...
CVE-2021-4026
bookstack is vulnerable to Improper Access Control...
Improper access control
bookstack is vulnerable to Improper Access Control...
CVE-2021-4026
CVE-2021-4026 affects BookStack (open-source PHP/Laravel app). The vulnerability is an Improper Access Control in which users with API access can view attachments they should not have read access to, potentially exposing sensitive information. The issue is documented across multiple feeds (NVD en...
BookStack 访问控制错误漏洞
BookStack is an open source set of BookStackApp Bookstackapp team's platform for building wiki documents using PHP and Laravel. bookstackapp suffers from an access control error vulnerability that stems from the fact that users with API access can view any attachments to which they do not have re...
PT-2021-22847 · Bookstack · Bookstack
Name of the Vulnerable Software and Affected Versions: bookstack affected versions not specified Description: The issue is related to Improper Access Control. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this...