Skip to main content
ExploitPublished

https://github.com/BookStackApp/BookStack · BookStack 25.12.1 · Denial of Service

Affects https://github.com/BookStackApp/BookStackSource Exploit-DB RSS Feed

0
Severity
Medium

Rated by Threat Radar

Patch
Available – fixed in 25.12.1

Data as of 18 Jun 2026, 21:48 UTC

What to do

Upgrade https://github.com/BookStackApp/BookStack to 25.12.1.

Affected software

ProductAffectedFixed in
https://www.bookstackapp.com https://github.com/BookStackApp/BookStackAffected
  • < 25.12.1
Fixed in
  • 25.12.1

AI-suggested

Upgrade to BookStack version 25.12.1 or later, which addresses this denial of service vulnerability. No other mitigation guidance is provided. Patch status is confirmed by the affectedVersions field indicating versions prior to 25.12.1 are vulnerable.

Description

BookStack 25.12.1 - Denial of Service

Indicators of compromise

Exploit source code

Exploit code for BookStack 25.12.1 - Denial of Service2,130 characters
# Exploit Title: BookStack 25.12.1 - Denial of Service 
Search Terms (Resource Exhaustion)
# Date: 2026-04-29
# Exploit Author: Gabriel Rodrigues (TEXUGO)
# Vendor Homepage: https://www.bookstackapp.com
# Software Link: https://github.com/BookStackApp/BookStack
# Version: < 25.12.1
# Tested on: BookStack v25.12 (Docker) + PHP 8.3 + MySQL 8.0
# CVE: Pending (Request ID: 1970573)
# References:
# https://www.bookstackapp.com/blog/bookstack-release-v25-12-1/
# https://github.com/BookStackApp/BookSta…

References

Community reviews

Loading reviews…