Book Stack v23.10.2 - LFR via Blind SSRF
Priority LOW 32CWE-918Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-918 and the CVSS impact.
Summary
Book Stack version 23.10.2 allows filtering local files on the server. This is possible because the application is vulnerable to SSRF.
Why it matters now
EPSS 0.01381 72nd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| BookStack | BookStack | 23.10.2 | — | No fix listed | CNA |
- BookStack VendorBookStack Affected 23.10.2 Fixed in — No fix listed CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:bookstackapp:bookstack:23.10.2:*:*:*:*:*:*:* | 23.10.2 | Vulnerable | bookstackapp |
- cpe:2.3:a:bookstackapp:bookstack:23.10.2:*:*:*:*:*:*:* Versions 23.10.2 Vulnerable ·bookstackapp
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2023-6199
- 2026-10-03 Alias added: GHSA-fwg4-q55q-w62p
References
More bookstackapp Bookstack vulnerabilities
- TI-2021-02995 Improper Access Control in bookstackapp/bookstack CVSS 3.1CRITICAL 9.8
- TI-2023-04263 Server-Side Request Forgery (SSRF) in bookstackapp/bookstack CVSS 3.1LOW 2.4
- TI-2020-04312 Remote Code Execution Through Image Uploads in BookStack CVSS 3.1HIGH 8.8
- TI-2020-16032 Cross-Site Scripting in BookStack CVSS 3.1HIGH 8.7
- TI-2020-16031 Cross-Site Scripting in BookStack CVSS 3.1HIGH 8.7
- TI-2021-02848 Cross-Site Request Forgery (CSRF) in bookstackapp/bookstack CVSS 3.1MEDIUM 6.8
Sources
- CVE-2023-6199 · CVE Program
- CVE-2023-6199 · NVD
- FIRST EPSS
- GHSA-fwg4-q55q-w62p · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences