CVE-2023-6199CWE-918

Book Stack v23.10.2 - LFR via Blind SSRF

Medium · published November 20, 2023

CVSS v3.1
6.5
EPSS
1%
Percentile
71.9
In the wild
Unconfirmed
What it is

Book Stack version 23.10.2 allows filtering local files on the server. This is possible because the application is vulnerable to SSRF.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01381 · 71.9th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2023-11-20T22:21Z
EPSS history
Timeline
  • 20 NOV 22:21Z
    Book Stack v23.10.2 - LFR via Blind SSRF
    cvelistv5