CVE-2023-4624

LOW

bookstackapp/bookstack <v23.08 - SSRF

Title source: llm

Server-Side Request Forgery (SSRF) in GitHub repository bookstackapp/bookstack prior to v23.08.

Core 2

Core References

Vendor Advisory

Exploit, Third Party Advisory

CVSS v3 2.4

EPSS 0.0052

EPSS Percentile 67.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

CWE

CWE-918

Status published

Products (1)

bookstackapp/bookstack < 23.08

Published Aug 30, 2023

Tracked Since Feb 18, 2026