{"action":"Upgrade ssddanbrown/bookstack to 21.11.2 or later.","affected":[{"fixed":"21.11.2","introduced":"0"}],"component":"ssddanbrown/bookstack","cve_ids":["CVE-2021-4026"],"ecosystem":"Packagist","epss":0.00926,"exploited":false,"fixed_versions":["21.11.2"],"ghsa_id":"GHSA-jm6p-wfjg-xm7x","id":"tcs_01M5KF4PW3T98BV5H158JNM0F4","modified_at":"2024-02-16T08:19:44.836906Z","published_at":"2021-12-01T18:26:48Z","references":["https://osv.dev/vulnerability/GHSA-jm6p-wfjg-xm7x","https://nvd.nist.gov/vuln/detail/CVE-2021-4026","https://github.com/bookstackapp/bookstack/commit/b4fa82e3298a15443ca40bff205b7a16a1031d92","https://github.com/BookStackApp/BookStack/releases/tag/v21.11.2","https://github.com/bookstackapp/bookstack","https://huntr.dev/bounties/c6dfa80d-43e6-4b49-95af-cc031bb66b1d"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-jm6p-wfjg-xm7x","url":"https://osv.dev/vulnerability/GHSA-jm6p-wfjg-xm7x"}],"summary":"bookstack is vulnerable to Improper Access Control"}