SENAYAN Library Management System (SLiMS) Bulian v9.5.2 does not strip exif data from uploaded images. This allows attackers to obtain information such as the user's geolocation and device information.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://github.com/slims/slims9_bulian/issues/186 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2023-04-14T00:00:00
Updated: 2024-08-02T14:14:40.064Z
Reserved: 2023-04-07T00:00:00
Link: CVE-2023-29850
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-04-14T14:15:11.733
Modified: 2024-11-21T07:57:34.940
Link: CVE-2023-29850
Redhat
No data.