Lucene search
Veracode Vulnerability DatabaseVERACODE:32963HistoryNov 15, 2021 - 2:30 a.m.
Unrestricted File Upload
2021-11-1502:30:35
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
29.9%
ssddanbrown/bookstack allows unrestricted file upload. Lack of checking uploaded file type and size allows an authenticated user with privilege to create role to upload any type of file, allowing upload of phishing page and get administrators credentials.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ssddanbrown/bookstack | le | v21.10.2 | |
| ssddanbrown/bookstack | le | v21.10.2 |
Related
prion
prion
Unrestricted file upload
2021-11-13 10:15:00
osv
osv
bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type
2021-11-15 23:17:37
CVE-2021-3915
2021-11-13 10:15:07
cvelist
cvelist
cve
cve
CVE-2021-3915
2021-11-13 10:15:07
cnvd
cnvd
BookStack code issue vulnerability
2021-11-16 00:00:00
huntr
huntr
in bookstackapp/bookstack
2021-10-28 14:57:53
nvd
nvd
CVE-2021-3915
2021-11-13 10:15:07
github
github
bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type
2021-11-15 23:17:37