X (Formerly Twitter): CVE-2017-15277 on Profile page

🗓️ 14 Feb 2018 09:13:58Reported by emitraniType

hackerone

hackerone🔗 hackerone.com👁 91 Views

Leakage via GIF upload on profile page, no size limi

Reporter	Title	Published	Views	Family All 80
GithubExploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Graphicsmagick	15 Jan 201901:20	–	githubexploit
GithubExploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Graphicsmagick	15 Jan 201901:20	–	githubexploit
GithubExploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Graphicsmagick	15 Jan 201901:20	–	githubexploit
AlpineLinux	CVE-2017-15277	12 Oct 201708:00	–	alpinelinux
BDU FSTEC	The vulnerability of the ReadGIFImage function (coder/gif.c) in the cross-platform library for handling graphics, GraphicsMagick, and the console-based graphic editor ImageMagick, allowing an intruder to gain unauthorized access to protected information.	19 Nov 201900:00	–	bdu_fstec
Cloud Foundry	USN-3681-1: ImageMagick vulnerabilities \| Cloud Foundry	14 Jun 201800:00	–	cloudfoundry
CNVD	ImageMagick and GraphicsMagick Information Disclosure Vulnerability	12 Oct 201700:00	–	cnvd
CVE	CVE-2017-15277	12 Oct 201708:00	–	cve
Cvelist	CVE-2017-15277	12 Oct 201708:00	–	cvelist
Debian	[SECURITY] [DLA 1139-1] imagemagick security update	19 Oct 201710:38	–	debian

08 Mar 2018 00:07Current

6.7Medium risk

Vulners AI Score6.7

EPSS0.4848

information leakage gif upload server security automation bug bounty