CVE-2023-29850: High severity library management system vulnerability

Published Apr 14, 2023

Updated

SENAYAN Library Management System (SLiMS) Bulian v9.5.2 does not strip exif data from uploaded images. This allows attackers to obtain information such as the user's geolocation and device information.

Affected Software

1 affected component

Library Management System=9.5.2

Event History

Apr 14, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·02:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the vulnerability ID?

The vulnerability ID is CVE-2023-29850.

What is the title of the vulnerability?

The title of the vulnerability is 'SENAYAN Library Management System (SLiMS) Bulian v9.5.2 does not strip exif data from uploaded images.'

How does the vulnerability affect the software?

The vulnerability allows attackers to obtain information such as the user's geolocation and device information.

What version of the software is affected?

Version 9.5.2 of the SLiMS Senayan Library Management System is affected.

How severe is the vulnerability?

The severity of the vulnerability is high, with a severity score of 7.5.

Is there a reference for further information?

Yes, you can find more information about the vulnerability [here](https://github.com/slims/slims9_bulian/issues/186).