From f83ed3f52dc971f44c94f462093304054b9815c7 Mon Sep 17 00:00:00 2001
From: Jamie Slome <jamie@418sec.com>
Date: Mon, 6 Sep 2021 11:36:28 +0100
Subject: [PATCH] Update CVE-2021-3768.json

---
 2021/3xxx/CVE-2021-3768.json | 101 +++++++++++++++++++++++++++++------
 1 file changed, 86 insertions(+), 15 deletions(-)

diff --git a/2021/3xxx/CVE-2021-3768.json b/2021/3xxx/CVE-2021-3768.json
index 0a8720bed9d..cd5ac9e37ba 100644
--- a/2021/3xxx/CVE-2021-3768.json
+++ b/2021/3xxx/CVE-2021-3768.json
@@ -1,18 +1,89 @@
 {
-    "data_type": "CVE",
-    "data_format": "MITRE",
-    "data_version": "4.0",
-    "CVE_data_meta": {
-        "ID": "CVE-2021-3768",
-        "ASSIGNER": "cve@mitre.org",
-        "STATE": "RESERVED"
-    },
-    "description": {
-        "description_data": [
+   "CVE_data_meta":{
+      "ASSIGNER":"security@huntr.dev",
+      "ID":"CVE-2021-3768",
+      "STATE":"PUBLIC",
+      "TITLE":"Cross-site Scripting (XSS) - Stored in bookstackapp/bookstack"
+   },
+   "affects":{
+      "vendor":{
+         "vendor_data":[
             {
-                "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+               "product":{
+                  "product_data":[
+                     {
+                        "product_name":"bookstackapp/bookstack",
+                        "version":{
+                           "version_data":[
+                              {
+                                 "version_affected":"<",
+                                 "version_value":"21.08.2"
+                              }
+                           ]
+                        }
+                     }
+                  ]
+               },
+               "vendor_name":"bookstackapp"
             }
-        ]
-    }
-}
\ No newline at end of file
+         ]
+      }
+   },
+   "data_format":"MITRE",
+   "data_type":"CVE",
+   "data_version":"4.0",
+   "description":{
+      "description_data":[
+         {
+            "lang":"eng",
+            "value":"bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"
+         }
+      ]
+   },
+   "impact":{
+      "cvss":{
+         "attackComplexity":"LOW",
+         "attackVector":"NETWORK",
+         "availabilityImpact":"NONE",
+         "baseScore":5.4,
+         "baseSeverity":"MEDIUM",
+         "confidentialityImpact":"LOW",
+         "integrityImpact":"LOW",
+         "privilegesRequired":"LOW",
+         "scope":"UNCHANGED",
+         "userInteraction":"NONE",
+         "vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
+         "version":"3.0"
+      }
+   },
+   "problemtype":{
+      "problemtype_data":[
+         {
+            "description":[
+               {
+                  "lang":"eng",
+                  "value":"CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"
+               }
+            ]
+         }
+      ]
+   },
+   "references":{
+      "reference_data":[
+         {
+            "name":"https://huntr.dev/bounties/64a0229f-ff5e-4c64-b83e-9bfc0698a78e",
+            "refsource":"CONFIRM",
+            "url":"https://huntr.dev/bounties/64a0229f-ff5e-4c64-b83e-9bfc0698a78e"
+         },
+         {
+            "name":"https://github.com/bookstackapp/bookstack/commit/5e6092aaf8fd420202016038286554860bf8ea64",
+            "refsource":"MISC",
+            "url":"https://github.com/bookstackapp/bookstack/commit/5e6092aaf8fd420202016038286554860bf8ea64"
+         }
+      ]
+   },
+   "source":{
+      "advisory":"64a0229f-ff5e-4c64-b83e-9bfc0698a78e",
+      "discovery":"EXTERNAL"
+   }
+}