{"action":"Upgrade ssddanbrown/bookstack to 21.11.3 or later.","affected":[{"fixed":"21.11.3","introduced":"0"}],"component":"ssddanbrown/bookstack","cve_ids":["CVE-2021-4119"],"ecosystem":"Packagist","epss":0.26893,"exploited":false,"fixed_versions":["21.11.3"],"ghsa_id":"GHSA-9c5c-5j4h-8q2c","id":"tcs_01M5KEZY1K01E6ZJK9WHKTYTF8","modified_at":"2023-11-08T04:06:54.283602Z","published_at":"2021-12-16T19:40:26Z","references":["https://osv.dev/vulnerability/GHSA-9c5c-5j4h-8q2c","https://nvd.nist.gov/vuln/detail/CVE-2021-4119","https://github.com/bookstackapp/bookstack/commit/e765e618547c92f4e0b46caca6fb91f0174efd99","https://github.com/BookStackApp/BookStack/releases/tag/v21.11.3","https://github.com/bookstackapp/bookstack","https://huntr.dev/bounties/135f2d7d-ab0b-4351-99b9-889efac46fca"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-9c5c-5j4h-8q2c","url":"https://osv.dev/vulnerability/GHSA-9c5c-5j4h-8q2c"}],"summary":"BookStack is vulnerable to Improper Access Control."}