Low severityNVD Advisory· Published Dec 2, 2021· Updated Aug 3, 2024
Cross-Site Request Forgery (CSRF) in bookstackapp/bookstack
CVE-2021-3944
Description
bookstack is vulnerable to Cross-Site Request Forgery (CSRF)
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
ssddanbrown/bookstackPackagist | < 21.11 | 21.11 |
Affected products
1- Range: unspecified
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- github.com/advisories/GHSA-wc7v-77jr-5c3mghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2021-3944ghsaADVISORY
- github.com/bookstackapp/bookstack/commit/88e6f93abf54192a69cc8080e0dc6516ee68ccbbghsax_refsource_MISCWEB
- huntr.dev/bounties/65551490-5ade-49aa-8b8d-274c2ca9fdc9ghsax_refsource_CONFIRMWEB
News mentions
0No linked articles in our index yet.