TI-2023-04263 Aliases CVE-2023-4624 GHSA-j6gp-9p24-6xr9

Server-Side Request Forgery (SSRF) in bookstackapp/bookstack

MEDIUM 46CWE-918Published 2023-08-30 · Updated 2024-10-01

Key facts

Attack vector: Network
Privileges required: High
User interaction: Required
Attack complexity: Low
Impact type: Information disclosure
Confidentiality · integrity · availability: Low · None · None
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-918 and the CVSS impact.

Summary

Server-Side Request Forgery (SSRF) in GitHub repository bookstackapp/bookstack prior to v23.08.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00625 50th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed bookstackapp/bookstack (bookstackapp): v23.08

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
bookstackapp	bookstackapp/bookstack	before v23.08	v23.08	Patch available	CNA

bookstackapp/bookstack Vendorbookstackapp Affected before v23.08 Fixed in v23.08 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:bookstackapp:bookstack::::::::	before 23.08	Vulnerable	bookstackapp

cpe:2.3:a:bookstackapp:bookstack:*:*:*:*:*:*:*:* Versions before 23.08 Vulnerable ·bookstackapp

Remediation

Fix · CNA bookstackapp/bookstack (bookstackapp) Fixed in v23.08

Timeline

2026-10-02 Threatist record created from CVE-2023-4624
2026-10-03 Alias added: GHSA-j6gp-9p24-6xr9
2026-11-03 EPSS moved to the 50th–90th percentile

References

Exploit 1

https://huntr.dev/bounties/9ce5cef6-e546-44e7-addf-a2726fa4e60c

Advisory 1

https://github.com/bookstackapp/bookstack/commit/c324ad928dbdd54ce5b09eb0dabe60ef9de1ea38

TI-2021-02995 Improper Access Control in bookstackapp/bookstack CVSS 3.1CRITICAL 9.8
TI-2020-04312 Remote Code Execution Through Image Uploads in BookStack CVSS 3.1HIGH 8.8
TI-2020-16032 Cross-Site Scripting in BookStack CVSS 3.1HIGH 8.7
TI-2020-16031 Cross-Site Scripting in BookStack CVSS 3.1HIGH 8.7
TI-2023-05693 Book Stack v23.10.2 - LFR via Blind SSRF CVSS 3.1MEDIUM 6.5
TI-2021-02848 Cross-Site Request Forgery (CSRF) in bookstackapp/bookstack CVSS 3.1MEDIUM 6.8

See all 20 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences