CVE-2023-29850

HIGH

SENAYAN Library Management System Bulian v9.5.2 - Information Exposure via EXIF Metadata in Uploaded Images

Title source: llm

Description

SENAYAN Library Management System (SLiMS) Bulian v9.5.2 does not strip exif data from uploaded images. This allows attackers to obtain information such as the user's geolocation and device information.

References (1)

Core 1

Core References

Exploit, Issue Tracking, Vendor Advisory

https://github.com/slims/slims9_bulian/issues/186

Scores

CVSS v3 7.5

EPSS 0.0074

EPSS Percentile 49.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact partial

Details

CWE

CWE-203

Status published

Products (1)

slims/senayan_library_management_system 9.5.2

Published Apr 14, 2023

Tracked Since Feb 18, 2026