CVE-2021-3944

bookstack is vulnerable to Cross-Site Request Forgery (CSRF)

• CWE-352

• https://github.com/bookstackapp/bookstack/commit/88e6f93abf54192a69cc8080e0dc6516ee68ccbbPatch, Third Party Advisory
• https://huntr.dev/bounties/65551490-5ade-49aa-8b8d-274c2ca9fdc9Exploit, Patch, Third Party Advisory
• https://github.com/bookstackapp/bookstack/commit/88e6f93abf54192a69cc8080e0dc6516ee68ccbbPatch, Third Party Advisory
• https://huntr.dev/bounties/65551490-5ade-49aa-8b8d-274c2ca9fdc9Exploit, Patch, Third Party Advisory

Published

Dec 2, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-39427Cross site scripting vulnerability in 188Jianzhan 2.10 allow…5.4
• CVE-2021-39428Cross Site Scripting (XSS) vulnerability in Users.php in eyo…5.4
• CVE-2021-3943A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 …9.8
• CVE-2021-39432diplib v3.0.0 is vulnerable to Double Free.6.5
• CVE-2021-39433A local file inclusion (LFI) vulnerability exists in version…7.5
• CVE-2021-39434A default username and password for an administrator account…7.5
• CVE-2021-3945django-helpdesk is vulnerable to Improper Neutralization of …6.1
• CVE-2021-39458Triggering an error page of the import process in Yakamara M…6.5
• CVE-2021-39459Remote code execution in the modules component in Yakamara M…7.2
• CVE-2021-3947A stack-buffer-overflow was found in QEMU in the NVME compon…5.5
• CVE-2021-39473Saibamen HotelManager v1.2 is vulnerable to Cross Site Scrip…5.4
• CVE-2021-39474Vulnerability in the product Docsis 3.0 UBC1319BA00 Router s…7.2