Description
Incorrect access control in BookStack before v24.05.1 allows attackers to confirm existing system users and perform targeted notification email DoS via public facing forms.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | ssddanbrown/bookstack | < 24.05.1 | 24.05.1 | GHSA-pj36-fcrg-327j |