CyberRota Analysis
AI-GeneratedThe vulnerability affects BookStack versions prior to 26.05.4, allowing users with Import Content and Create Books permissions to exploit the portable ZIP import feature. By uploading a specially crafted ZIP file containing a PHP polyglot file as a book cover, attackers can bypass image extension validation, leading to remote code execution on the server. Organizations using BookStack should prioritize patching this vulnerability to prevent unauthorized access and potential compromise of their systems.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
BookStack before 26.05.4 contains a remote code execution vulnerability in the portable ZIP import functionality that allows users with Import Content and Create Books permissions to upload a PHP polyglot file as a book cover. Attackers can bypass image extension validation by embedding a PHP file with a .php filename in the ZIP archive, which is stored in the public web root and executed by unauthenticated requests.