Lucene search

[email protected]CVE-2023-4624

HistoryAug 30, 2023 - 1:15 p.m.

CVE-2023-4624

2023-08-3013:15:15

CWE-918

[email protected]

web.nvd.nist.gov

cve-2023-4624

server-side request forgery

ssrf

github

bookstackapp

bookstack

nvd

2.4 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N

4 Medium

AI Score

Confidence

High

2.8 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:M/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

13.8%

JSON

Server-Side Request Forgery (SSRF) in GitHub repository bookstackapp/bookstack prior to v23.08.

CPENameOperatorVersion
bookstackapp:bookstackbookstackapp bookstacklt23.08
bookstackapp:bookstackbookstackapp bookstackeq0.26.1
bookstackapp:bookstackbookstackapp bookstackeq22.07.1
bookstackapp:bookstackbookstackapp bookstackeq22.06.1
bookstackapp:bookstackbookstackapp bookstackeq0.25.2
bookstackapp:bookstackbookstackapp bookstackeq22.07.3
bookstackapp:bookstackbookstackapp bookstackeq0.18.5
bookstackapp:bookstackbookstackapp bookstackeq0.31.1
bookstackapp:bookstackbookstackapp bookstackeq21.05.1
bookstackapp:bookstackbookstackapp bookstackeq0.8.1

CPE	Name	Operator	Version
bookstackapp:bookstack	bookstackapp bookstack	lt	23.08
bookstackapp:bookstack	bookstackapp bookstack	eq	0.26.1
bookstackapp:bookstack	bookstackapp bookstack	eq	22.07.1
bookstackapp:bookstack	bookstackapp bookstack	eq	22.06.1
bookstackapp:bookstack	bookstackapp bookstack	eq	0.25.2
bookstackapp:bookstack	bookstackapp bookstack	eq	22.07.3
bookstackapp:bookstack	bookstackapp bookstack	eq	0.18.5
bookstackapp:bookstack	bookstackapp bookstack	eq	0.31.1
bookstackapp:bookstack	bookstackapp bookstack	eq	21.05.1
bookstackapp:bookstack	bookstackapp bookstack	eq	0.8.1

Rows per page:

1-10 of 1641

References

github.com/bookstackapp/bookstack/commit/c324ad928dbdd54ce5b09eb0dabe60ef9de1ea38

huntr.dev/bounties/9ce5cef6-e546-44e7-addf-a2726fa4e60c

2.4 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N

4 Medium

AI Score

Confidence

High

2.8 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:M/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

13.8%

JSON

Related for CVE-2023-4624

prion1 huntr1 osv1 cvelist1