CVE-2023-40969
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Summary
CVE-2023-40969 is a newly disclosed vulnerability affecting Senayan Library Management Systems SLIMS 9 Bulian version 9.6.1. This issue permits Server Side Request Forgery (SSRF) attacks through the admin/modules/bibliography/pop_p2p.php file. An attacker can exploit this vulnerability by crafting malicious HTTP requests, potentially leading to unauthorized data access or system manipulation. The SSRF vulnerability poses a significant risk to the confidentiality and integrity of affected library management systems. It is recommended that users upgrade to the latest version of SLIMS or apply the appropriate security patches as soon as possible to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Slims
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions