Lucene search
Veracode Vulnerability DatabaseVERACODE:33155HistoryDec 02, 2021 - 11:14 a.m.
Insecure Access Control
2021-12-0211:14:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
access validation
permission service
unauthorized access
attachment viewing
EPSS
0.001
Percentile
21.4%
ssddanbrown/bookstack does not properly validate user’s access. The permission service allows users to obtain unauthorized access to the API, enabling users to view any attachment without having permission.
Related
huntr
huntr
Improper Access Control in bookstackapp/bookstack
2021-11-27 18:36:24
prion
prion
Improper access control
2021-11-30 20:15:00
cnvd
cnvd
BookStack Access Control Error Vulnerability
2021-12-02 00:00:00
osv
osv
CVE-2021-4026
2021-11-30 20:15:07
bookstack is vulnerable to Improper Access Control
2021-12-01 18:26:48
cve
cve
CVE-2021-4026
2021-11-30 20:15:07
github
github
bookstack is vulnerable to Improper Access Control
2021-12-01 18:26:48
cvelist
cvelist
CVE-2021-4026 Improper Access Control in bookstackapp/bookstack
2021-11-30 19:55:10
nvd
nvd
CVE-2021-4026
2021-11-30 20:15:07