CVE-2024-36676

Published July 9th, 2024

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

Incorrect access control in BookStack before v24.05.1 allows attackers to confirm existing system users and perform targeted notification email DoS via public facing forms.

BookStackApp/BookStack

NOW MANAGED ON CODEBERG

GitHub

18.8K