← All advisories

High severityNVD Advisory· Published Nov 13, 2021· Updated Aug 3, 2024

Unrestricted Upload of File with Dangerous Type in bookstackapp/bookstack

CVE-2021-3915

Description

bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
ssddanbrown/bookstackPackagist	< 21.0.3	21.0.3

Affected products

2

ghsa-coords
pkg:composer/ssddanbrown/bookstack
Range: < 21.0.3
Bookstackapp/Bookstackapp/bookstackv5
Range: unspecified

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-w2f4-hxpm-mq98ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-3915ghsaADVISORY
github.com/bookstackapp/bookstack/commit/ae155d67454d6b9f6c93b2bb457aaa4b2eb1a9edghsax_refsource_MISCWEB
huntr.dev/bounties/fcb65f2d-257a-46f4-bac9-f6ded5649079ghsax_refsource_CONFIRMWEB

News mentions

0

No linked articles in our index yet.