What is CVE-2023-3744?

CVE-2023-3744 is a critical-severity vulnerability in Slims Senayan Library Management System, classified under Server-Side Request Forgery (SSRF). CVSS score: 9.9/10. Published 2023-10-02.

How severe is CVE-2023-3744?

Critical severity. CVSS v3 base score is 9.9 out of 10.

Is CVE-2023-3744 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

SSRF in Slims Senayan Library Management System

CVE-2023-3744

Server-Side Request Forgery vulnerability in SLims version 9.6.0. This vulnerability could allow an authenticated attacker to send requests to internal services or upload the contents of relevant files via the "scrape_image.php" file in the imageURL parameter.

Vulnerability class: SSRF (Server-Side Request Forgery)

EPSS: 0.005 (37.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.9 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.

Affected products

Slims Senayan_library_management_system — versions 9.6.0
Slims — versions 9.6.0

Weakness classification (CWE)

CWE-918 — Server-Side Request Forgery (SSRF)

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

cve-coordination@incibe.es (Third Party Advisory)

Frequently asked questions

What is CVE-2023-3744?: CVE-2023-3744 is a critical-severity vulnerability in Slims Senayan Library Management System, classified under Server-Side Request Forgery (SSRF). CVSS score: 9.9/10. Published 2023-10-02.
How severe is CVE-2023-3744?: Critical severity. CVSS v3 base score is 9.9 out of 10.
Is CVE-2023-3744 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.