CVE-2023-3744 | Server-Side Request Forgery vulnerability in SLims version 9… | CVSS 9.9 CRITICAL

Description

Server-Side Request Forgery vulnerability in SLims version 9.6.0. This vulnerability could allow an authenticated attacker to send requests to internal services or upload the contents of relevant files via the "scrape_image.php" file in the imageURL parameter.

Metadata

CVE ID: CVE-2023-3744
State: PUBLISHED
Assigner: INCIBE
Reserved: 2023-07-18 07:17 UTC
Published: 2023-10-02 13:50 UTC
Last updated: 2024-09-20 14:52 UTC
Primary CWE: CWE-918
CWE-918 Server-Side Request Forgery (SSRF)
Vendor / Product: SLiMS / SLiMS
Sources: cve.org · NVD

Severity & Metrics

9.9 CRITICAL CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

SSVC — CISA Coordinator

Exploitation: none
Automatable: no
Tech. Impact: total

Affected products (1)

Vendor	Product	Platform	Versions
SLiMS	SLiMS	—	9.6.0

Weakness (CWE)

CWE	Source	Description
CWE-918	cna	CWE-918 Server-Side Request Forgery (SSRF)

CVSS scores (1)

Score	Severity	Version	Source	Vector
9.9	CRITICAL	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References (1)

https://www.incibe.es/en/incibe-cert/notices/aviso/server-side-request-forgery-slims