BookStackApp BookStack 23.10.2
Approved changes feed: RSS · Atom
cpe:2.3:a:bookstackapp:bookstack:23.10.2:*:*:*:*:*:*:*
part: a version: 23.10.2 update: *
| Vendor | Bookstackapp (d8795f02-d2cd-5c9e-9bb2-8c5229e35e17) |
|---|---|
| Product | Bookstack (dc1d796e-f699-5c0b-8d86-5bbc7a4b1754) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/bookstackapp/bookstack |
purl2cpe | 2026-06-01 10:14:53.123752 |
pkg:sourceforge/bookstack.mirror |
purl2cpe | 2026-06-01 10:14:53.123753 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-6199 |
vulnerable | 2026-06-08 06:19:46.550558 |
Book Stack v23.10.2 - LFR via Blind SSRF
MEDIUM (6.5)
Book Stack version 23.10.2 allows filtering local files on the server. This is possible because the application is vulnerable to SSRF.
Published: 2023-11-20T22:21:04.992Z
Updated: 2025-05-19T14:02:54.810Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.