Lucene search
+L

205 matches found

NVD
NVD
added 2021/12/02 5:15 p.m.31 views

CVE-2021-3944

bookstack is vulnerable to Cross-Site Request Forgery CSRF...

6.8CVSS0.00621EPSS
SaveExploits1References2
OSV
OSV
added 2021/12/02 5:15 p.m.15 views

CVE-2021-3944

bookstack is vulnerable to Cross-Site Request Forgery CSRF...

6.8CVSS6.7AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/12/02 5:15 p.m.5 views

CVE-2021-3944

bookstack is vulnerable to Cross-Site Request Forgery CSRF...

6.8CVSS6AI score0.00621EPSS
SaveExploits1References3
Prion
Prion
added 2021/12/02 5:15 p.m.25 views

Cross site request forgery (csrf)

bookstack is vulnerable to Cross-Site Request Forgery CSRF...

4CVSS6.7AI score0.00621EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2021/12/02 4:40 p.m.69 views

CVE-2021-3944

CVE-2021-3944 affects BookStack. Multiple connected sources confirm a cross-site request forgery (CSRF) vulnerability in BookStack/BookStackApp, caused by insufficient CSRF validation. Documented details indicate the issue is CSRF without explicit exploitation vectors or patched versions in the p...

6.8CVSS5.1AI score0.00621EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
added 2021/12/02 12:0 a.m.99 views

BookStack Access Control Error Vulnerability

BookStack is an open source set of BookStackApp Bookstackapp team's platform for building wiki documents using PHP and Laravel. bookstackapp suffers from an access control error vulnerability that stems from the fact that users with API access can view any attachments to which they do not have re...

6.5CVSS3.3AI score0.00897EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/12/02 12:0 a.m.9 views

BookStack 跨站请求伪造漏洞

BookStack is the BookStackApp team's open source platform for building wiki documents using PHP and Laravel. bookstack suffers from a cross-site request forgery vulnerability, which stems from the software's lack of validation for cross-site request forgery. An attacker could use this vulnerabili...

6.8CVSS5.5AI score0.00621EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2021/12/01 6:26 p.m.31 views

bookstack is vulnerable to Improper Access Control

bookstack is vulnerable to Improper Access Control...

6.5CVSS3.4AI score0.00897EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2021/12/01 6:26 p.m.73 views

GHSA-JM6P-WFJG-XM7X bookstack is vulnerable to Improper Access Control

bookstack is vulnerable to Improper Access Control...

4.3CVSS4.4AI score0.00897EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2021/11/30 8:15 p.m.6 views

CVE-2021-4026

bookstack is vulnerable to Improper Access Control...

6.5CVSS6.1AI score0.00897EPSS
SaveExploits1References3
NVD
NVD
added 2021/11/30 8:15 p.m.35 views

CVE-2021-4026

bookstack is vulnerable to Improper Access Control...

6.5CVSS0.00897EPSS
SaveExploits1References2
OSV
OSV
added 2021/11/30 8:15 p.m.17 views

CVE-2021-4026

bookstack is vulnerable to Improper Access Control...

4.3CVSS4.6AI score
SaveExploits0References2
Prion
Prion
added 2021/11/30 8:15 p.m.16 views

Improper access control

bookstack is vulnerable to Improper Access Control...

4CVSS4.5AI score0.00897EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2021/11/30 7:55 p.m.83 views

CVE-2021-4026

CVE-2021-4026 affects BookStack (open-source PHP/Laravel app). The vulnerability is an Improper Access Control in which users with API access can view attachments they should not have read access to, potentially exposing sensitive information. The issue is documented across multiple feeds (NVD en...

6.5CVSS4.7AI score0.00897EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2021/11/30 12:0 a.m.9 views

BookStack 访问控制错误漏洞

BookStack is an open source set of BookStackApp Bookstackapp team's platform for building wiki documents using PHP and Laravel. bookstackapp suffers from an access control error vulnerability that stems from the fact that users with API access can view any attachments to which they do not have re...

6.5CVSS6AI score0.00897EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2021/11/30 12:0 a.m.6 views

PT-2021-22847 · Bookstack · Bookstack

Name of the Vulnerable Software and Affected Versions: bookstack affected versions not specified Description: The issue is related to Improper Access Control. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this...

6.5CVSS5.1AI score0.00897EPSS
SaveExploits1References9
CNVD
CNVD
added 2021/11/16 12:0 a.m.39 views

BookStack code issue vulnerability

BookStack is an open-source platform for building wiki documents using PHP and Laravel from the BookStackApp Bookstackapp team.BookStack is vulnerable to a code issue that stems from a lack of file type restrictions in the software's controller.php, which could be exploited by an attacker to...

7.6CVSS2.4AI score0.0093EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
added 2021/11/15 11:17 p.m.31 views

bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type

bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type...

7.6CVSS5.6AI score0.0093EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2021/11/15 11:17 p.m.53 views

GHSA-W2F4-HXPM-MQ98 bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type

bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type...

7.6CVSS5.4AI score0.0093EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2021/11/13 10:15 a.m.5 views

CVE-2021-3915

bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type...

7.6CVSS6.8AI score0.0093EPSS
SaveExploits1References3
Rows per page
Query Builder