BookStack v26.09.2 Security Advisory: Fixes for Unauth Modification and Data Leakage

BookStack Security Release v26.09.2 Vulnerability Summary Vulnerability Overview BookStack has released security update version v26.09.2, addressing the following two critical security issues: 1. Unauthorized Modification of Page Content - Issue: Under certain conditions, page content can still be modified even when the page is in a "locked" state. - Risk: May lead to compromised data integrity or malicious tampering. 2. Risk of Sensitive Information Disclosure - Issue: Under specific conditions, users may access content that should be protected (e.g., unauthorized pages). - Risk: May result in exposure of sensitive data. > Note: This update also includes other security improvements, but the two items above are the primary focus of this release. --- Scope of Impact Affected Versions: All versions prior to v26.09.2 (i.e., v26.09.1 and earlier). Affected Components: - Page editing and permission control modules - Page access control logic - Potentially WYSIWYG editor-related functionality (as reported by Seneca Polytechnics) --- Remediation Official Fix: Upgrade to BookStack v26.09.2 or higher. Temporary Mitigation Measures (if immediate upgrade is not possible): - Strictly review and restrict user permissions to prevent unauthorized access to sensitive pages. - Enable and configure server-level access controls (e.g., .htaccess, Nginx rules) to block unauthorized requests. - Regularly audit page content and access logs to detect anomalous modification activities. --- POC / Exploit Code ✅ No POC code or exploit code is provided in this release. --- Additional Information Release Date: September 26, 2024 Reporters: - Ryan De (Sofia, London) - Niall (Ireland) - Seneca Polytechnics (WYSIWYG application portion) - Ryan De (other portions) Changelog: - Removed cookie setting for unauthorized users - Fixed issue where page content was unintentionally modified - Fixed page access control vulnerability - Fixed issue where page content was unintentionally exposed - Fixed issue where page content was unintentionally modified --- Recommended Actions 1. Immediately upgrade to v26.09.2. 2. Inspect existing pages for any signs of tampering. 3. Review user permission configurations to ensure adherence to the principle of least privilege. 4. Subscribe to BookStack security advisories for future updates. > Official Link: https://www.bookstackapp.com/security/

Goal Reached Thanks to every supporter — we hit 100%!

BookStack v26.09.2 Security Advisory: Fixes for Unauth Modification and Data Leakage