CVE-2023-6199: Bookstackapp Bookstack

Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Book Stack version 23.10.2 allows filtering local files on the server. This is possible because the application is vulnerable to SSRF.

Affected products

• Bookstackapp Bookstack: version 23.10.2 only

Published 2023-11-20. Last modified 2026-06-17.