CVE-2021-3944

Packagist/ssddanbrown/bookstack CVE-2021-3944: low 3.1

bookstack is vulnerable to Cross-Site Request Forgery (CSRF)

Action: Upgrade ssddanbrown/bookstack to 21.11 or later.

composer require ssddanbrown/bookstack:21.11

Affected

Fixed versions

Sources

• osv: GHSA-wc7v-77jr-5c3m
• https://nvd.nist.gov/vuln/detail/CVE-2021-3944
• https://github.com/bookstackapp/bookstack/commit/88e6f93abf54192a69cc8080e0dc6516ee68ccbb
• https://github.com/bookstackapp/bookstack
• https://huntr.dev/bounties/65551490-5ade-49aa-8b8d-274c2ca9fdc9

CVE-2021-3944 · published 2021-12-03T20:38:37Z · modified 2023-11-08T04:06:36.015874Z · JSON