MEDIUMCVSS v3.1 5.4Vulnerability
CVE-2026-116020
BookStack before 26.09.2 contains an incorrect authorization vulnerability in AttachmentController that allows authenticated users to access other users' draft page attachments by ID. Attackers with attachment permissions can enumerate sequential attachment IDs to download, rename, relink, or replace files on another user's unpublished draft pages.
Properties
- Severity
- MEDIUM
- Nvd fetched at
- 2026-10-24T14:36:52.052760+00:00
- Cvss severity
- MEDIUM
- Cvss score
- 5.4
- Retrieved at
- 2026-10-24T14:37:54+00:00
- Score
- 5.4
- Cvss version
- 3.1
- Last source
- NVD
- Cve id
- CVE-2026-116020
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
- First seen by Signal
- 2026-10-24T14:37:54+00:00
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
- Published at
- 2026-10-24T12:16:58.660
- Last modified
- 2026-10-24T12:16:58.660
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph