{"action":"Upgrade ssddanbrown/bookstack to 21.0.3 or later.","affected":[{"fixed":"21.0.3","introduced":"0"}],"component":"ssddanbrown/bookstack","cve_ids":["CVE-2021-3915"],"ecosystem":"Packagist","epss":0.00961,"exploited":false,"fixed_versions":["21.0.3"],"ghsa_id":"GHSA-w2f4-hxpm-mq98","id":"tcs_01M5KF9M3F622Z1AV5DC6CXZXK","modified_at":"2023-11-08T04:06:31.029793Z","published_at":"2021-11-15T23:17:37Z","references":["https://osv.dev/vulnerability/GHSA-w2f4-hxpm-mq98","https://nvd.nist.gov/vuln/detail/CVE-2021-3915","https://github.com/bookstackapp/bookstack/commit/ae155d67454d6b9f6c93b2bb457aaa4b2eb1a9ed","https://github.com/BookStackApp/BookStack","https://huntr.dev/bounties/fcb65f2d-257a-46f4-bac9-f6ded5649079"],"severity":{"label":"high","score":7.6},"sources":[{"source":"osv","source_id":"GHSA-w2f4-hxpm-mq98","url":"https://osv.dev/vulnerability/GHSA-w2f4-hxpm-mq98"}],"summary":"bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type"}