3 matches found
CVE-2021-3906
bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type...
6.5CVSS0.00646EPSS
SaveExploits1References2
CVE-2021-3906
CVE-2021-3906 affects BookStack (bookstackapp/bookstack) via Unrestricted Upload of File with Dangerous Type. The root cause is a validation bypass: trim is applied to single-quoted strings, so an extension like pngr becomes png after trimming, allowing dangerous files to pass validation. This en...
6.5CVSS5.9AI score0.00646EPSS
SaveExploits1References2Affected Software1
20