writeups.xyz / CVE-2021-4119: [Bookstack] Email harvesting via SQL "LIKE" clause exploitation

Submitter : c2a

Date: 5 April 2022

Bounty : undisclosed

Vulnerabilities :

• Broken Access Control
• SQL Injection

Programs :

• Bookstack

Authors :

• Haxatron (@Haxatron1)

Link :
https://haxatron.gitbook.io/vulnerability-research/vr1