CVE-2023-3744

—

CVSS 3.1

8.8 high

EPSS

<1%p39

Published

Oct 2, 2023 (Oct 2, 2023)

Modified

Jun 17, 2026

Description

Server-Side Request Forgery vulnerability in SLims version 9.6.0. This vulnerability could allow an authenticated attacker to send requests to internal services or upload the contents of relevant files via the "scrape_image.php" file in the imageURL parameter.

Vendors: slims
Products: senayan library management system
Weakness: CWE-918
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.