2 matches found
CVE-2024-36676
Incorrect access control in BookStack before v24.05.1 allows attackers to confirm existing system users and perform targeted notification email DoS via public facing forms...
8.7CVSS0.00646EPSS
SaveExploits0References8
CVE-2024-36676: Improper Neutralization of Input During Web Page Generation
Incorrect access control in BookStack before v24.05.1 allows attackers to confirm existing system users and perform targeted notification email DoS via public facing forms...
7.5CVSS5.8AI score0.00646EPSS
SaveExploits0References1
20