CVE-2021-3906
Assigner: @huntrdev
Published: 2021-10-27T21:20:10
State: PUBLISHED
affected: product: bookstackapp/bookstack
vendor: bookstackapp
versions: lessThan: 21.10.1
status: affected
version: unspecified
versionType: custom
descriptions: value: bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type
metrics: cvssV3_0: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.4
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
version: 3.0
problemTypes: descriptions: cweId: CWE-434
description: CWE-434 Unrestricted Upload of File with Dangerous Type
type: CWE
source: advisory: f115bdf5-c06b-4627-a6fa-ba6904a43ba3
discovery: EXTERNAL
title: Unrestricted Upload of File with Dangerous Type in bookstackapp/bookstack