CVE-2021-3915
CVE-2021-3915 · Unrestricted Upload of File with Dangerous Type in bookstackapp/bookstack
This page contains facts from public vulnerability sources. Check the original advisory before updating.
bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type
CVSS 7.6 · High · EPSS 1.0% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
bookstackapp/bookstack
- Versions
- ≥ unspecified, < 21.10.3: Affected (custom)
Update to 21.10.3
ssddanbrown/bookstack Packagist
- Versions
- 0.7.2
- V0.7.5
- v0.10.0
- v0.11.0
- v0.11.1
- v0.11.2
- v0.12.0
- v0.12.1
- v0.12.2
- v0.13.0
- v0.13.1
- v0.14.0
- v0.14.1
- v0.14.2
- v0.14.3
- v0.15.0
- v0.15.1
- v0.15.2
- v0.15.3
- v0.16.0
- v0.16.1
- v0.16.2
- v0.16.3
- v0.17.0
- v0.17.1
- v0.17.2
- v0.17.3
- v0.17.4
- v0.18.0
- v0.18.1
- v0.18.2
- v0.18.3
- v0.18.4
- v0.18.5
- v0.19.0
- v0.20.0
- v0.20.1
- v0.20.2
- v0.20.3
- v0.21.0
- v0.22.0
- v0.23.0
- v0.23.1
- v0.23.2
- v0.24.0
- v0.24.1
- v0.24.2
- v0.24.3
- v0.25.0
- v0.25.1
- v0.25.2
- v0.25.3
- v0.25.4
- v0.25.5
- v0.26.0
- v0.26.1
- v0.26.2
- v0.26.3
- v0.26.4
- v0.27
- v0.27.1
- v0.27.2
- v0.27.3
- v0.27.4
- v0.27.5
- v0.28.0
- v0.28.1
- v0.28.2
- v0.28.3
- v0.29.0
- v0.29.1
- v0.29.2
- v0.29.3
- v0.30.0
- v0.30.1
- v0.30.2
- v0.30.3
- v0.30.4
- v0.30.5
- v0.30.6
- v0.30.7
- v0.31.0
- v0.31.1
- v0.31.2
- v0.31.3
- v0.31.4
- v0.31.5
- v0.31.6
- v0.31.7
- v0.31.8
- v0.5.0
- v0.6.0
- v0.6.1
- v0.6.2
- v0.6.3
- v0.7.0
- v0.7.3
- v0.7.4
- v0.7.6
- v0.8.0
- v0.8.1
- v0.8.2
- v0.9.0
- v0.9.1
- v0.9.2
- v0.9.3
- Affected ranges
- ECOSYSTEM: < 21.0.3
Update to 21.0.3