cve/2023/CVE-2023-4624.md

18 lines
685 B
Markdown
Raw Normal View History

2024-05-25 21:48:12 +02:00
### [CVE-2023-4624](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4624)
![](https://img.shields.io/static/v1?label=Product&message=bookstackapp%2Fbookstack&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=unspecified%3C%20v23.08%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-918%20Server-Side%20Request%20Forgery%20(SSRF)&color=brighgreen)
### Description
Server-Side Request Forgery (SSRF) in GitHub repository bookstackapp/bookstack prior to v23.08.
### POC
#### Reference
- https://huntr.dev/bounties/9ce5cef6-e546-44e7-addf-a2726fa4e60c
#### Github
- https://github.com/fkie-cad/nvd-json-data-feeds