Server-Side Request Forgery (SSRF) in bookstackapp/bookstack
CVE-2021-3758

6.3MEDIUM

Key Information:

Vendor

Bookstackapp

Status
Bookstackapp/bookstack
Vendor
CVE Published:
2 September 2021

What is CVE-2021-3758?

bookstack is vulnerable to Server-Side Request Forgery (SSRF)

Affected Version(s)

bookstackapp/bookstack < 21.08

References

https://huntr.dev/bounties/a8d7fb24-9a69-42f3-990a-2db93b...
x_refsource_CONFIRM
https://github.com/bookstackapp/bookstack/commit/bee5e2c7...
x_refsource_MISC

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

CVSS V3.0

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.