CVE-2023-6199
Book Stack v23.10.2 - LFR via Blind SSRF
Summary
Book Stack v23.10.2 - LFR via Blind SSRF
Original description
The description as published by the source.
Book Stack version 23.10.2 allows filtering local files on the server. This is possible because the application is vulnerable to SSRF.
References
- advisory fluidattacks.com
- advisory github.com
- advisory nvd.nist.gov
- web bookstackapp.com