CVE-2023-6199

Book Stack version 23.10.2 allows filtering local files on the server. This is possible because the application is vulnerable to SSRF.

Date published : 2023-11-20

https://fluidattacks.com/advisories/imagination/

https://www.bookstackapp.com/blog/bookstack-release-v23-10-3/