CVE-2021-4026

bookstack is vulnerable to Improper Access Control

Score

CVSS 3.0 6.5 Medium

Status

Modified - security@huntr.dev

Published

2021-11-30

Last modified

2024-08-03

Weaknesses

CWE-284, CWE-863

Affected products

• Bookstack (Bookstackapp)
• Bookstackappbookstack (Bookstackapp)

References

• https://github.com/bookstackapp/bookstack/commit/b4fa82e3298a15443ca40bff205b7a16a1031d92
• https://huntr.dev/bounties/c6dfa80d-43e6-4b49-95af-cc031bb66b1d