EUVD-2019-6675

Malware in sbrugna...

Answer vulnerable to Insertion of Sensitive Information Into Sent Data

answerdev/answer is an open-source knowledge-based community software. Answer prior to 1.0.8 does not strip EXIF geolocation data from user-uploaded logos. As a result, anyone can get sensitive information like a user's device ID, geolocation, system information, system version, etc...

CVE-2019-15740

An issue was discovered in GitLab Community and Enterprise Edition 7.9 through 12.2.1. EXIF Geolocation data was not being removed from certain image uploads...

CVE-2019-15740: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in GitLab Community and Enterprise Edition 7.9 through 12.2.1. EXIF Geolocation data was not being removed from certain image uploads...

PT-2019-14361

Name of the Vulnerable Software and Affected Versions GitLab Community and Enterprise Edition versions 7.9 through 12.2.1 Description An issue was discovered where EXIF Geolocation data was not being removed from certain image uploads. Recommendations For versions 7.9 through 12.2.1, consider...