Lucene search
Veracode Vulnerability DatabaseVERACODE:33155HistoryDec 02, 2021 - 11:14 a.m.
Insecure Access Control
2021-12-0211:14:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.001 Low
EPSS
Percentile
21.6%
ssddanbrown/bookstack does not properly validate user’s access. The permission service allows users to obtain unauthorized access to the API, enabling users to view any attachment without having permission.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ssddanbrown/bookstack | le | v0.24.1 | |
| ssddanbrown/bookstack | le | v0.24.1 |
Related
huntr
huntr
Improper Access Control in bookstackapp/bookstack
2021-11-27 18:36:24
cnvd
cnvd
BookStack Access Control Error Vulnerability
2021-12-02 00:00:00
cve
cve
CVE-2021-4026
2021-11-30 20:15:07
prion
prion
Improper access control
2021-11-30 20:15:00
osv
osv
CVE-2021-4026
2021-11-30 20:15:07
bookstack is vulnerable to Improper Access Control
2021-12-01 18:26:48
github
github
bookstack is vulnerable to Improper Access Control
2021-12-01 18:26:48
cvelist
cvelist
CVE-2021-4026 Improper Access Control in bookstackapp/bookstack
2021-11-30 19:55:10
nvd
nvd
CVE-2021-4026
2021-11-30 20:15:07