PT-2023-29923 · Bookstack · Bookstack

Published 2023-08-30 · Updated 2023-09-01 · CVE-2023-4624

Positive Technologies (AI Summary)

CVSS v3.1

2.4

Low

Base vector

AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions bookstack versions prior to v23.08

Description The issue is related to Server-Side Request Forgery (SSRF) in the GitHub repository bookstackapp/bookstack. This allows an attacker to make unauthorized requests on behalf of the server.

Recommendations For versions prior to v23.08, update to version v23.08 or later to resolve the issue.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2023-4624

Affected Products

Bookstack

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/4xxx/CVE-2023-4624.json · Exploit
• 🔥 https://huntr.dev/bounties/9ce5cef6-e546-44e7-addf-a2726fa4e60c · Exploit
• https://github.com/bookstackapp/bookstack/commit/c324ad928dbdd54ce5b09eb0dabe60ef9de1ea38 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-4624 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-4624 · Security Note
• https://t.me/cibsecurity/69418 · Telegram Post
• https://twitter.com/CVEnew/status/1696862392284594358 · Twitter Post