CVE-2021-3768

Description

References

• bookstackapp/bookstack commit 5e6092a · Patch
• huntr.dev/bounties/64a0229f-ff5e-4c64-b83e-9bfc0698a78e · Exploit

bookstack의 다른 취약점

• CVE-2023-6199보통 6.5Book Stack version 23.10.2 allows filtering local files on the server. This is possible because the application is vulnerable to SSRF.
• CVE-2023-4624낮음 2.4Server-Side Request Forgery (SSRF) in GitHub repository bookstackapp/bookstack prior to v23.08.
• CVE-2022-40690보통 5.4Cross-site scripting vulnerability in BookStack versions prior to v22.09 allows a remote authenticated attacker to inject an arbitrary scrip…
• CVE-2022-0877보통 5.4Cross-site Scripting (XSS) - Stored in GitHub repository bookstackapp/bookstack prior to v22.02.3.
• CVE-2021-4194보통 6.5bookstack is vulnerable to Improper Access Control