CVE-2023-6199

6.5 mediumEPSS 1.4%

Medium (6.5) in bookstackapp bookstack. EPSS 1.4% chance of exploitation in the next 30 days.

Book Stack version 23.10.2 allows filtering local files on the server. This is possible because the application is vulnerable to SSRF.

Severity

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWE: CWE-918
Published: 2023-11-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19