CVE-2023-6199

    Dashboard / Vulnerabilities / CVE-2023-6199

    CVE-2023-6199

    Published: 20 Nov 2023Last Modified: 12 Aug 2026

    Summary: Book Stack v23.10.2 - LFR via Blind SSRF

    Details: Book Stack version 23.10.2 allows filtering local files on the server. This is possible because the application is vulnerable to SSRF.

    References: https://fluidattacks.com/advisories/imagination/, https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/6xxx/CVE-2023-6199.json, https://nvd.nist.gov/vuln/detail/CVE-2023-6199, https://www.bookstackapp.com/blog/bookstack-release-v23-10-3/

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- d8383cfa802637ceb0ce0a250d9f4962c282524f
    Fixed -None

    Affected versions

    23.10.2

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-6199 | CVE-DB