CVE-2019-10109

An Information Exposure issue (issue 1 of 2) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before…

published May 15, 2019

CVSS
—
EPSS
2%
Percentile
80.0
In the wild
Unconfirmed
What it is

An Information Exposure issue (issue 1 of 2) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. EXIF geolocation data were not removed from images when uploaded to GitLab. As a result, anyone with access to the uploaded image could obtain its geolocation, device, and software version data (if present).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01961 · 80.0th percentile
Published
2019-05-15T19:14Z
EPSS history
Timeline
  • 15 MAY 19:14Z
    An Information Exposure issue (issue 1 of 2) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before…
    cvelistv5