Bookstack CVE-2021-3758

MEDIUM

Server-Side Request Forgery (SSRF) (CWE-918)

2021-09-02 security@huntr.dev

6.5

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Lifecycle Timeline

1

CVE Published

Sep 02, 2021 - 12:15 nvd

MEDIUM 6.5

DescriptionNVD

bookstack is vulnerable to Server-Side Request Forgery (SSRF)

AnalysisAI

bookstack is vulnerable to Server-Side Request Forgery (SSRF). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Technical ContextAI

This vulnerability is classified as Server-Side Request Forgery (SSRF) (CWE-918), which allows attackers to make the server perform requests to unintended internal or external resources. bookstack is vulnerable to Server-Side Request Forgery (SSRF) Affected products include: Bookstackapp Bookstack.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Validate and allowlist destination URLs, block requests to internal networks, use network segmentation.

More in Bookstack

View all

CVE-2021-4119 CRITICAL Act Now POC

bookstack is vulnerable to Improper Access Control. Rated critical severity (CVSS 9.8), this vulnerability is remotely e

CVE-2020-26210 HIGH This Week POC

In BookStack before version 0.30.4, a user with permissions to edit a page could add an attached link which would execut

CVE-2021-3944 MEDIUM This Month POC

bookstack is vulnerable to Cross-Site Request Forgery (CSRF). Rated medium severity (CVSS 6.8), this vulnerability is re

CVE-2023-6199 MEDIUM This Month POC

Book Stack version 23.10.2 allows filtering local files on the server. Rated medium severity (CVSS 6.5), this vulnerabil

CVE-2021-3916 MEDIUM This Month POC

bookstack is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'). Rated medium

CVE-2021-3906 MEDIUM This Month POC

bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type. Rated medium severity (CVSS 6.5), this vulne

CVE-2021-3874 MEDIUM This Month POC

bookstack is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'). Rated medium

CVE-2021-3915 MEDIUM This Month POC

bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type. Rated medium severity (CVSS 5.7), this vulne

CVE-2022-0877 MEDIUM This Month POC

Cross-site Scripting (XSS) - Stored in GitHub repository bookstackapp/bookstack prior to v22.02.3. Rated medium severity

CVE-2021-3768 MEDIUM This Month POC

bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'). Rated m

CVE-2021-3767 MEDIUM This Month POC

bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'). Rated m

CVE-2020-5256 HIGH This Week

BookStack before version 0.25.5 has a vulnerability where a user could upload PHP files through image upload functions,

Same weakness CWE-918 – Server-Side Request Forgery (SSRF)

View all

CVE-2021-34473 CRITICAL POC

CVE-2021-26855 CRITICAL POC

CVE-2022-41040 HIGH POC

CVE-2024-21893 HIGH POC

CVE-2023-48022 CRITICAL POC

CVE-2016-3718 MEDIUM POC

CVE-2015-8813 HIGH POC

CVE-2020-24881 CRITICAL POC

Same technique SSRF

View all

CVE-2016-3718 MEDIUM POC

CVE-2015-8813 HIGH POC

CVE-2020-24881 CRITICAL POC

CVE-2026-15409 CRITICAL POC

CVE-2024-54385 HIGH POC

CVE-2022-45835 MEDIUM POC

CVE-2024-54330 HIGH POC

CVE-2026-20230 HIGH POC

Share

CVE-2021-3758 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy