CVE-2021-3906 MEDIUM

CVE-2021-3906: Unrestricted Upload of File with Dangerous Type in bookstackapp/bookstack

Vendor Bookstackapp
Product bookstackapp/bookstack
Weakness CWE-434 · Unrestricted file upload
Published October 27, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

5.4/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

What the vulnerability does

01Description

bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type

Key dates

02Disclosure timeline

October 27, 2021 CVE published
August 3, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-7878 Metasoft 美特软件 MetaCRM upload2.jsp unrestricted upload CVE-2023-3625 Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System Duty Write-UploadFile UploadFile.ashx unrestricted upload CVE-2024-58295 ElkArte Forum 1.1.9 Authenticated Remote Code Execution via Theme Upload CVE-2025-67706 Unvalidated File Upload vulnerability in ArcGIS Server. CVE-2024-10994 Codezips Online Institute Management System edit_user.php unrestricted upload