Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

BookStackApp/BookStack

              development @ 7539933
            

Fixes

CVEs

CRITICAL

Peak severity

61.8%

Coverage

Highlights

Auth Bypass: 24 prior fixes. Scrutinize any change in this area.

app/Http/Controllers/ImageController.php: most-fixed (4 issues). Treat as high-risk during review.

54 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Byp: Permission evaluation logic has been patched multiple times to fix bypasses via fallback permissions, dynamic actions, and incorrect owner fields, indicating a fragile core that is prone to regression.

Arbitrary File Upload / Code Execution: Image upload validation evolved from MIME-only to extension whitelists to block PHP disguised as images, but similar weaknesses persist in other upload paths (ZIP exports, drawio, resizer) that required separate hardening.

Stored XSS: SVG attribute filtering was widened repeatedly to cover xlink:href and all attributes, indicating an ongoing cat-and-mouse with allowed HTML content that can execute scripts.