CVE-2021-3944

Cross-Site Request Forgery (CSRF) in bookstackapp/bookstack

bookstack is vulnerable to Cross-Site Request Forgery (CSRF)

Affected

bookstackapp · bookstackapp/bookstack

CVSS v3.1 NVD

6.8 MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

CVSS v3.0 HUNTR

3.1 LOWCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

CVSS v2.0 NVD

4.0 MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:N

EPSS

0.64% chance of exploitation in the next 30 days, 50th percentile

Published

2021-12-02

Updated

2024-08-03

Proof-of-concept exploits (1)

• https://huntr.dev/bounties/65551490-5ade-49aa-8b8d-274c2ca9fdc9

Security advisories

• bookstackapp/bookstack/commit/88e6f93abf54192a69cc8080e0dc6516ee68ccbb
• advisories/GHSA-wc7v-77jr-5c3m

References

• CVE Record
• NVD entry