medium6.5
CVE-2023-6199
Book Stack version 23.10.2 allows filtering local files on the server.
Impact
Book Stack version 23.10.2 allows filtering local files on the server. This is possible because the application is vulnerable to SSRF.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bookstackapp | Bookstack | Version 23.10.2 |