GHSA-jm6p-wfjg-xm7x
bookstack is vulnerable to Improper Access Control
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | ssddanbrown/bookstack | < 21.11.2 | 21.11.2 |
Details
As written in the advisory (Markdown source, shown as plain text).
bookstack is vulnerable to Improper Access Control.
References
External links from the advisory. They lead to third-party sites.
- https://nvd.nist.gov/vuln/detail/CVE-2021-4026
- https://github.com/bookstackapp/bookstack/commit/b4fa82e3298a15443ca40bff205b7a16a1031d92
- https://github.com/BookStackApp/BookStack/releases/tag/v21.11.2
- https://github.com/bookstackapp/bookstack
- https://huntr.dev/bounties/c6dfa80d-43e6-4b49-95af-cc031bb66b1d