Approved changes feed: RSS · Atom

cpe:2.3:a:bookstackapp:bookstack:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorBookstackapp (d8795f02-d2cd-5c9e-9bb2-8c5229e35e17)
ProductBookstack (dc1d796e-f699-5c0b-8d86-5bbc7a4b1754)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/bookstackapp/bookstack purl2cpe 2026-06-01 10:14:53.123303
pkg:sourceforge/bookstack.mirror purl2cpe 2026-06-01 10:14:53.123306

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-36676 vulnerable 2026-06-08 06:39:45.584911 Details available
Incorrect access control in BookStack before v24.05.1 allows attackers to confirm existing system users and perform targeted notification email DoS via public facing forms.
Published: 2024-07-09T00:00:00.000Z
Updated: 2024-08-02T03:37:05.349Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.