{"action":"Upgrade ssddanbrown/bookstack to 24.05.1 or later.","affected":[{"fixed":"24.05.1","introduced":"0"}],"component":"ssddanbrown/bookstack","cve_ids":["CVE-2024-36676"],"ecosystem":"Packagist","epss":0.00646,"exploited":false,"fixed_versions":["24.05.1"],"ghsa_id":"GHSA-pj36-fcrg-327j","id":"tcs_01M5KF6DYEPPXSARK0R0N6B4Z6","modified_at":"2024-07-11T17:32:02.094847Z","published_at":"2024-07-10T00:30:41Z","references":["https://osv.dev/vulnerability/GHSA-pj36-fcrg-327j","https://nvd.nist.gov/vuln/detail/CVE-2024-36676","https://github.com/BookStackApp/BookStack/issues/4993","https://github.com/BookStackApp/BookStack/commit/69af9e0dbdefd8c6c951e8afbe2bba141d454beb","https://github.com/BookStackApp/BookStack","https://github.com/BookStackApp/BookStack/releases/tag/v24.05.1","https://www.bookstackapp.com/blog/bookstack-release-v24-05-1"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-pj36-fcrg-327j","url":"https://osv.dev/vulnerability/GHSA-pj36-fcrg-327j"}],"summary":"BookStack Incorrect Access Control vulnerability"}