CVE-2023-40969

Summary

CVE-2023-40969 is a newly disclosed vulnerability affecting Senayan Library Management Systems SLIMS 9 Bulian version 9.6.1. This issue permits Server Side Request Forgery (SSRF) attacks through the admin/modules/bibliography/pop_p2p.php file. An attacker can exploit this vulnerability by crafting malicious HTTP requests, potentially leading to unauthorized data access or system manipulation. The SSRF vulnerability poses a significant risk to the confidentiality and integrity of affected library management systems. It is recommended that users upgrade to the latest version of SLIMS or apply the appropriate security patches as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.