CVE-2024-36676: BookStack Incorrect Access Control vulnerability
Summary
CVE-2024-36676: BookStack Incorrect Access Control vulnerability. Affects ssddanbrown/bookstack versions < 24.05.1. Fixed in 24.05.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
BookStack is an open-source platform for creating documentation and knowledge bases. It provides a user-friendly interface for organizing and sharing information. The vulnerability in question is an incorrect access control issue that existed in BookStack versions prior to v24.05.1. This vulnerability allowed attackers to confirm the existence of system users and perform a targeted notification email Denial of Service (DoS) attack through public-facing forms.
Vulnerability Detail
The incorrect access control vulnerability in BookStack allowed attackers to exploit the system's public-facing forms to confirm the presence of specific users and launch a targeted notification email DoS attack. By manipulating the forms, attackers could gather information about existing users and potentially use this information for malicious purposes. The vulnerability had a high severity rating with a CVSS score of 8.2. It could lead to user privacy breaches, disruption of email services, and potential unauthorized access to sensitive information.
How To Fix
Minimum fixed version
24.05.1
This is the first release that contains the fix.
composer require ssddanbrown/bookstack:24.05.1Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. Users are advised to upgrade to the latest version of BookStack to ensure the security of their system.
Conclusion
The incorrect access control vulnerability in BookStack versions prior to v24.05.1 allowed attackers to confirm the existence of system users and perform a targeted notification email DoS attack. This vulnerability has a high severity rating with a CVSS score of 8.2. Users are strongly advised to upgrade their BookStack installation to version 24.05.1 or later to mitigate the risk of exploitation.
See every vulnerability recorded for ssddanbrown/bookstack →
FAQ
The vulnerability allows attackers to confirm the existence of system users and perform a targeted notification email DoS attack. This can lead to user privacy breaches, disruption of email services, and potential unauthorized access to sensitive information.
You can use Vulert's playground (https://vulert.com/scanner) to check if your BookStack installation is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities, using just the composer.lock file.
Yes, the fix for this vulnerability is available in BookStack version 24.05.1 or later. Users are advised to upgrade their installation to the latest version to mitigate the risk.
There are no known exploits for this vulnerability at the time of this report. However, it is important to promptly upgrade to the latest version to prevent any potential exploitation.
Yes, this vulnerability can be exploited remotely through public-facing forms. Attackers can manipulate these forms to confirm the existence of system users and launch a targeted notification email DoS attack.
References
Related vulnerabilities
Recent vulnerabilities recorded for ssddanbrown/bookstack.
