bookstack is vulnerable to Cross-Site Request Forgery (CSRF)

MEDIUM 6.8CVE-2021-3944 · GHSA-wc7v-77jr-5c3m · Published 02/12/2021 · updated 17/06/2026

Package	Affected versions	Patched versions
ssddanbrown/bookstack Packagist	`< 21.11`	`21.11`
bookstack bookstackapp	`< 21.11`	`21.11`

Description

NVD description

bookstack is vulnerable to Cross-Site Request Forgery (CSRF)

Running one of these products? Scan your site to see whether it exposes a vulnerable version.