bookstack is vulnerable to Improper Access Control

Description

References

• nvd.nist.gov/vuln/detail/CVE-2021-4194 · ADVISORY
• bookstackapp/bookstack commit cb0d674 · WEB
• bookstackapp/bookstack · PACKAGE
• huntr.dev/bounties/0bc8b3f7-9057-4eb7-a989-24cd5689f114 · WEB

Mais vulnerabilidades de ssddanbrown/bookstack

• CVE-2024-36676ALTO 7.5Incorrect access control in BookStack before v24.05.1 allows attackers to confirm existing system users and perform targeted notification em…
• CVE-2022-0877MÉDIO 5.4Cross-site Scripting (XSS) - Stored in GitHub repository bookstackapp/bookstack prior to v22.02.3.
• CVE-2021-4119CRÍTICO 9.8bookstack is vulnerable to Improper Access Control
• CVE-2021-3944MÉDIO 6.8bookstack is vulnerable to Cross-Site Request Forgery (CSRF)
• CVE-2021-4026MÉDIO 4.3bookstack is vulnerable to Improper Access Control