High severity · published Jul 9, 2024
CVE-2024-36676
Incorrect access control in BookStack before v24.05.1 allows attackers to confirm existing system users and perform targeted notification email DoS via public facing forms
7.5
CVSS
0.6%
EPSS
No
On KEV
Description
Incorrect access control in BookStack before v24.05.1 allows attackers to confirm existing system users and perform targeted notification email DoS via public facing forms.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 51% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BO
Bookstack · Bookstackapp
before v24.05.1 · source: CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-36676
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-36676
github.com
https://github.com/BookStackApp/BookStack/issues/4993
github.com
https://github.com/BookStackApp/BookStack/releases/tag/v24.05.1
www.bookstackapp.com
https://www.bookstackapp.com/blog/bookstack-release-v24-05-1/
More from Bookstack
9.8
CVE-2021-4119
bookstack is vulnerable to Improper Access Control
8.8
CVE-2026-82450
BookStack before 26.05.4 Remote Code Execution via Book Cover
8.8
CVE-2020-5256
BookStack before version 0.25.5 has a vulnerability where a user could upload PHP files through image upload functions, which would allow them to execute code on the host system…
8.7
CVE-2026-84695
BookStack before 26.05.4 Stored XSS via Drawing Upload
8.7
CVE-2020-26211
In BookStack before version 0.30.4, a user with permissions to edit a page could insert JavaScript code through the use of `javascript:` URIs within a link or form which would…