Incorrect access control in BookStack before v24.05.1 allows attackers to confirm existing system users and perform targeted notification email DoS via public facing forms...
7.5CVSS6.8AI score0.00646EPSS
SaveExploits0References1
OSV•added 2024/07/09 12:0 a.m.•7 views
CVE-2024-36676
Incorrect access control in BookStack before v24.05.1 allows attackers to confirm existing system users and perform targeted notification email DoS via public facing forms...
