1 writeup tagged with Bookstack
TeamCity authentication bypass combined with Bookstack SSRF to read internal files and chain into remote code execution.