GitHub Advisoryadvisory · Packagist

GHSA-ghhm-xrwp-75m9 bookstack is vulnerable to Improper Access Control

MEDIUM Published 2022-01-08 Modified 2022-01-07 Official page ↗
Aliases
CVE-2021-4194
Ecosystem
Packagist
Packages
ssddanbrown/bookstack
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-284, CWE-668, CWE-863
Reviewed
2022-01-07

Affected packages

• Packagist ssddanbrown/bookstack: < 21.12.1 → fixed in 21.12.1

Description

bookstack is vulnerable to Improper Access Control

Related

Alias · CVE (1)

  • CVE-2021-4194 bookstack is vulnerable to Improper Access Control vulnerability

Weakness · CWE (3)

  • CWE-284 Improper Access Control weakness
  • CWE-668 Exposure of Resource to Wrong Sphere weakness
  • CWE-863 Incorrect Authorization weakness

References