{"id":"CVE-2021-4026","aliases":["GHSA-jm6p-wfjg-xm7x"],"url":"https://o3.security/vulnerability/CVE-2021-4026","summary":"bookstack is vulnerable to Improper Access Control","details":"bookstack is vulnerable to Improper Access Control","published":"2021-11-30T20:15:07.690Z","modified":"2026-08-07T17:02:41.356477Z","cvss":{"score":4.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":1,"affectedPackages":[{"ecosystem":"Packagist","name":"ssddanbrown/bookstack","fixedVersion":"21.11.2"}],"fix":{"url":"https://github.com/bookstackapp/bookstack/commit/b4fa82e3298a15443ca40bff205b7a16a1031d92","label":"bookstackapp/bookstack@b4fa82e"},"references":[{"type":"FIX","url":"https://github.com/bookstackapp/bookstack/commit/b4fa82e3298a15443ca40bff205b7a16a1031d92"},{"type":"EVIDENCE","url":"https://huntr.dev/bounties/c6dfa80d-43e6-4b49-95af-cc031bb66b1d"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-07T17:02:41.356477Z"}}