VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 2, 2023· Updated Sep 20, 2024

Server-Side Request Forgery in SLiMS

CVE-2023-3744

Description

Server-Side Request Forgery vulnerability in SLims version 9.6.0. This vulnerability could allow an authenticated attacker to send requests to internal services or upload the contents of relevant files via the "scrape_image.php" file in the imageURL parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Slims/Slimllm-fuzzy2 versions
    =9.6.0+ 1 more
    • (no CPE)range: =9.6.0
    • (no CPE)range: 9.6.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.