269 matches found
CVE-2021-4026
CVE-2021-4026 affects BookStack (open-source PHP/Laravel app). The vulnerability is an Improper Access Control in which users with API access can view attachments they should not have read access to, potentially exposing sensitive information. The issue is documented across multiple feeds (NVD en...
BookStack 访问控制错误漏洞
BookStack is an open source set of BookStackApp Bookstackapp team's platform for building wiki documents using PHP and Laravel. bookstackapp suffers from an access control error vulnerability that stems from the fact that users with API access can view any attachments to which they do not have re...
CVE-2021-4026: Improper Access Control
bookstack is vulnerable to Improper Access Control...
PT-2021-22847 · Bookstack · Bookstack
Name of the Vulnerable Software and Affected Versions: bookstack affected versions not specified Description: The issue is related to Improper Access Control. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this...
BookStack code issue vulnerability
BookStack is an open-source platform for building wiki documents using PHP and Laravel from the BookStackApp Bookstackapp team.BookStack is vulnerable to a code issue that stems from a lack of file type restrictions in the software's controller.php, which could be exploited by an attacker to...
bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type
bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type...
GHSA-W2F4-HXPM-MQ98 bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type
bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type...
CVE-2021-3915
bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type...
Unrestricted file upload
bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type...
CVE-2021-3915
CVE-2021-3915 affects BookStack (BookStackApp) and is due to a lack of file type restrictions in the controller, enabling Unrestricted Upload of files with dangerous types. Variants are noted across multiple feeds (NVD, CNVD, GHSA, RH—Red Hat) with exploit guidance not provided in the supplied do...
CVE-2021-3915: Unrestricted Upload of File with Dangerous Type
bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type...
BookStack 代码问题漏洞
BookStack is an open-source platform for building wiki documents using PHP and Laravel from the BookStackApp Bookstackapp team.BookStack is vulnerable to a code issue that stems from a lack of file type restrictions in the software's controller.php, which could be exploited by an attacker to...
CVE-2021-3916
bookstack is vulnerable to Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...
CVE-2021-3916
bookstack is vulnerable to Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...
CVE-2021-3916
bookstack is vulnerable to Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...
CVE-2021-3916
CVE-2021-3916 affects BookStack (bookstackapp/bookstack). The vulnerability is an Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) in the web-facing file handling, enabling access to files under the storage directory via crafted pathnames. The PoC demonstrates traversa...
CVE-2021-3916: Improper Limitation of a Pathname to a Restricted Directory
bookstack is vulnerable to Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...
BookStack 路径遍历漏洞
BookStack is a suite of open source platforms for building wiki documentation using PHP and Laravel from the BookStackApp Bookstackapp team. A path traversal vulnerability exists in bookstack, which stems from an improper restriction of pathnames to restricted directories in the affected product...
Path Traversal in bookstackapp/bookstack
Description During reading recent BookStack source code 85dc8d I discovered path traversal vulnerability. Authenticated user can have access to all files stored in storage directory. Proof of Concept GET /uploads/images/..%2f/..%2f/logs/laravel.log HTTP/1.1 Host: 172.17.0.1:8888 User-Agent:...