Path Traversal in bookstackapp/bookstack
CVE-2021-3874

4.3MEDIUM

Key Information:

Vendor

Bookstackapp

Status
Bookstackapp/bookstack
Vendor
CVE Published:
15 October 2021

What is CVE-2021-3874?

bookstack is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected Version(s)

bookstackapp/bookstack < 21.08.5

References

https://huntr.dev/bounties/ac268a17-72b5-446f-a09a-9945ef...
x_refsource_CONFIRM
https://github.com/bookstackapp/bookstack/commit/7224fbcc...
x_refsource_MISC

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

CVSS V3.0

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.