Incorrect access control in BookStack before v24.05.1 allows attackers to confirm existing system users and perform targeted notification email DoS via public facing forms...
7.5CVSS7.5AI score
SaveExploits0References5
Cvelist•added 2024/07/09 12:00 a.m.•54 views
CVE-2024-36676
Incorrect access control in BookStack before v24.05.1 allows attackers to confirm existing system users and perform targeted notification email DoS via public facing forms...