CVE-2023-29850

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

SENAYAN Library Management System (SLiMS) Bulian v9.5.2 does not strip exif data from uploaded images. This allows attackers to obtain information such as the user's geolocation and device information.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-203

Affected software

No affected versions have been published.

Timeline

Published: Apr 14, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-298546.1DirCMS 6.0.0 has a Cross Site Scripting (XSS) vulnerability in the foreground.CVE-2023-298557.2WBCE CMS 1.5.3 has a command execution vulnerability via admin/languages/install.php.CVE-2023-298569.8D-Link DIR-868L Hardware version A1, firmware version 1.12 is vulnerable to Buffer Overflow. The vulnerability is in scandir.sgi binary.CVE-2023-298575.3An issue in Teslamate v1.27.1 allows attackers to obtain sensitive information via directly accessing the teslamate link.CVE-2023-29869.8The Abandoned Cart Lite for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.14.2 CVE-2023-298607.5An insecure permissions in /Taier/API/tenant/listTenant interface in DTStack Taier 1.3.0 allows attackers to view sensitive information via CVE-2023-298619.8An issue found in FLIR-DVTEL version not specified allows a remote attacker to execute arbitrary code via a crafted request to the managemen CVE-2023-298629.8An issue found in Agasio-Camera device version not specified allows a remote attacker to execute arbitrary code via the check and authLevel CVE-2023-298639.8Medical Systems Co. Medisys Weblab Products v19.4.03 was discovered to contain a SQL injection vulnerability via the tem:statement parameter CVE-2023-298676.5Zammad 5.3.x (Fixed 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker could gain information about linked accounts CVE-2023-298686.5Zammad 5.3.x (Fixed in 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker with agent and customer roles could perfo CVE-2023-29879.8The Wordapp plugin for WordPress is vulnerable to authorization bypass due to an use of insufficiently unique cryptographic signature on the