CVE-2023-29850

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-29850

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-29850.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-29850

Published

2023-04-14T00:00:00Z

Modified

2026-07-08T08:05:28.249019623Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

[none]

Details

SENAYAN Library Management System (SLiMS) Bulian v9.5.2 does not strip exif data from uploaded images. This allows attackers to obtain information such as the user's geolocation and device information.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/29xxx/CVE-2023-29850.json",
    "cna_assigner": "mitre"
}

References

Affected packages

Git / github.com/slims/slims9_bulian

Affected ranges

Type

GIT

Repo

https://github.com/slims/slims9_bulian

Events

Introduced

bca483c31bf802f65017ec2e19c9f5d457815850

Last affected

bca483c31bf802f65017ec2e19c9f5d457815850

Database specific

{
    "source": "CPE_STRING",
    "cpe": "cpe:2.3:a:slims:senayan_library_management_system:9.5.2:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "9.5.2"
        },
        {
            "last_affected": "9.5.2"
        }
    ]
}

Affected versions

9.*

9.5.2

v9.*

v9.5.2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-29850.json"