bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type

MÉDIO 5.7CVE-2021-3915 · GHSA-w2f4-hxpm-mq98 · Published 13/11/2021 · updated 17/06/2026

Em resumo

CVE-2021-3915 é uma vulnerabilidade MÉDIO (CVSS 5.7) que afeta ssddanbrown/bookstack, bookstack (bookstackapp).
Chance de exploração nos próximos 30 dias (EPSS): 0.96%, maior que 61.6% das vulnerabilidades.
Correção: atualize para 21.0.3, 21.10.3 ou posterior.

Package	Affected versions	Patched versions
ssddanbrown/bookstack Packagist	`< 21.0.3`	`21.0.3`
bookstack bookstackapp	`< 21.10.3`	`21.10.3`

bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type.

NVD description

bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 21.0.3

21.0.3

< 21.10.3

21.10.3

Mais vulnerabilidades de ssddanbrown/bookstack

Ver tudo →