Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-120689. PoCs published by Gabriel Rodrigues.
AI-analyzed exploit summary This PoC exploits a denial-of-service vulnerability in BookStack by sending a crafted search query with excessive terms, causing resource exhaustion due to inefficient SQL queries. The script uses 150 concurrent threads to amplify the impact.
Description
BookStack 25.12.1 - Denial of Service
Exploits (1)
exploitdb
WORKING POC
by Gabriel Rodrigues · pythonwebappsmultiple
https://www.exploit-db.com/exploits/52571
This PoC exploits a denial-of-service vulnerability in BookStack by sending a crafted search query with excessive terms, causing resource exhaustion due to inefficient SQL queries. The script uses 150 concurrent threads to amplify the impact.
Classification
Working Poc 95%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target:
BookStack < 25.12.1
Auth required
Prerequisites:
valid session cookie for authenticated access
MITRE ATT&CK
devstral-2 · analyzed May 22, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
May 22, 2026