CVE-2023-6199

Book Stack v23.10.2 - LFR via Blind SSRF

Book Stack version 23.10.2 allows filtering local files on the server. This is possible because the application is vulnerable to SSRF.

Affected

BookStack

CVSS v3.1 NVD

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

1.38% chance of exploitation in the next 30 days, 72nd percentile

Published

2023-11-20

Updated

2025-05-19

Proof-of-concept exploits (3)

• https://fluidattacks.com/advisories/imagination/
• 4xura/php_filter_chain_oracle_poc2★ · 2025-03-05
• AbdrrahimDahmani/php_filter_chains_oracle_exploit_for_CVE-2023-61990★ · 2025-02-28

Security advisories

• https://www.bookstackapp.com/blog/bookstack-release-v23-10-3
• https://fluidattacks.com/advisories/imagination

References

• CVE Record
• NVD entry

Related

• CVE-2025-30208
• CVE-2026-31431
• CVE-2026-44011