CVE-2023-29850

7.5 highEPSS 0.7%

High (7.5) in slims senayan library management system. EPSS 0.7% chance of exploitation in the next 30 days.

SENAYAN Library Management System (SLiMS) Bulian v9.5.2 does not strip exif data from uploaded images. This allows attackers to obtain information such as the user's geolocation and device information.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-203
Published: 2023-04-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

slims:senayan_library_management_system

References

https://github.com/slims/slims9_bulian/issues/186
https://github.com/slims/slims9_bulian/issues/186

Check your stack JSON