Lucene search
+L

315 matches found

osv_ghsa
osv_ghsa
•added 2021/12/03 8:38 p.m.•51 views

GHSA-WC7V-77JR-5C3M bookstack is vulnerable to Cross-Site Request Forgery (CSRF)

bookstack is vulnerable to Cross-Site Request Forgery CSRF...

3.1CVSS6.6AI score0.00641EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2021/12/03 8:38 p.m.•40 views

bookstack is vulnerable to Cross-Site Request Forgery (CSRF)

bookstack is vulnerable to Cross-Site Request Forgery CSRF...

6.8CVSS6.5AI score0.00641EPSS
SaveExploits1References4Affected Software1
osv_cve
osv_cve
•added 2021/12/02 5:15 p.m.•19 views

CVE-2021-3944

bookstack is vulnerable to Cross-Site Request Forgery CSRF...

6.8CVSS6.7AI score0.00641EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2021/12/02 5:15 p.m.•11 views

CVE-2021-3944

bookstack is vulnerable to Cross-Site Request Forgery CSRF...

6.8CVSS6AI score0.00641EPSS
SaveExploits1References3
NVD
NVD
•added 2021/12/02 5:15 p.m.•42 views

CVE-2021-3944

bookstack is vulnerable to Cross-Site Request Forgery CSRF...

6.8CVSS0.00641EPSS
SaveExploits1References2
Prion
Prion
•added 2021/12/02 5:15 p.m.•30 views

Cross site request forgery (csrf)

bookstack is vulnerable to Cross-Site Request Forgery CSRF...

4CVSS6.7AI score0.00641EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2021/12/02 4:40 p.m.•6 views

CVE-2021-3944

bookstack is vulnerable to Cross-Site Request Forgery CSRF...

6.8CVSS0.00641EPSS
SaveExploits1References4
CVE
CVE
•added 2021/12/02 4:40 p.m.•95 views

CVE-2021-3944

CVE-2021-3944 affects BookStack. Multiple connected sources confirm a cross-site request forgery (CSRF) vulnerability in BookStack/BookStackApp, caused by insufficient CSRF validation. Documented details indicate the issue is CSRF without explicit exploitation vectors or patched versions in the p...

6.8CVSS5.9AI score0.00641EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
•added 2021/12/02 12:00 a.m.•113 views

BookStack Access Control Error Vulnerability

BookStack is an open source set of BookStackApp Bookstackapp team's platform for building wiki documents using PHP and Laravel. bookstackapp suffers from an access control error vulnerability that stems from the fact that users with API access can view any attachments to which they do not have re...

6.5CVSS3.3AI score0.00926EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/02 12:00 a.m.•6 views

CVE-2021-3944: Cross-Site Request Forgery (CSRF)

bookstack is vulnerable to Cross-Site Request Forgery CSRF...

6.8CVSS5.8AI score0.00641EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/12/02 12:00 a.m.•25 views

BookStack Cross-Site Request Forgery Vulnerability

BookStack is the BookStackApp team's open source platform for building wiki documents using PHP and Laravel. bookstack suffers from a cross-site request forgery vulnerability, which stems from the software's lack of validation for cross-site request forgery. An attacker could use this vulnerabili...

6.8CVSS5.5AI score0.00641EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2021/12/02 12:00 a.m.•5 views

PT-2021-22586

Name of the Vulnerable Software and Affected Versions: bookstack affected versions not specified Description: The issue is related to Cross-Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. No information is provided...

6.8CVSS0.00641EPSS
SaveExploits1References9
Github Security Blog
Github Security Blog
•added 2021/12/01 6:26 p.m.•43 views

bookstack is vulnerable to Improper Access Control

bookstack is vulnerable to Improper Access Control...

6.5CVSS3.4AI score0.00926EPSS
SaveExploits1References5Affected Software1
osv_ghsa
osv_ghsa
•added 2021/12/01 6:26 p.m.•85 views

GHSA-JM6P-WFJG-XM7X bookstack is vulnerable to Improper Access Control

bookstack is vulnerable to Improper Access Control...

4.3CVSS4.4AI score0.00926EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2021/11/30 8:15 p.m.•10 views

CVE-2021-4026

bookstack is vulnerable to Improper Access Control...

6.5CVSS6.1AI score0.00926EPSS
SaveExploits1References3
NVD
NVD
•added 2021/11/30 8:15 p.m.•46 views

CVE-2021-4026

bookstack is vulnerable to Improper Access Control...

6.5CVSS0.00926EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2021/11/30 8:15 p.m.•25 views

CVE-2021-4026

bookstack is vulnerable to Improper Access Control...

4.3CVSS4.6AI score
SaveExploits0References2
Prion
Prion
•added 2021/11/30 8:15 p.m.•23 views

Improper access control

bookstack is vulnerable to Improper Access Control...

4CVSS4.5AI score0.00926EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2021/11/30 7:55 p.m.•6 views

CVE-2021-4026

bookstack is vulnerable to Improper Access Control...

7.1CVSS0.00926EPSS
SaveExploits1References5
CVE
CVE
•added 2021/11/30 7:55 p.m.•106 views

CVE-2021-4026

CVE-2021-4026 affects BookStack (open-source PHP/Laravel app). The vulnerability is an Improper Access Control in which users with API access can view attachments they should not have read access to, potentially exposing sensitive information. The issue is documented across multiple feeds (NVD en...

6.5CVSS6.2AI score0.00926EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder