BookStack Remote Code Execution Vulnerability

BookStack is a platform for storing and organizing information and documents. A remote code execution vulnerability exists in versions of BookStack prior to 0.25.5. The vulnerability stems from a user being able to upload PHP files via the image upload feature. An attacker can exploit this...