CVE-2019-14280

In some circumstances, Craft 2 before 2.7.10 and 3 before 3.2.6 wasn't stripping EXIF data from user-uploaded images when it was configured to do so…

published July 26, 2019

CVSS
—
EPSS
9%
Percentile
95.4
In the wild
Unconfirmed
What it is

In some circumstances, Craft 2 before 2.7.10 and 3 before 3.2.6 wasn't stripping EXIF data from user-uploaded images when it was configured to do so, potentially exposing personal/geolocation data to the public.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09358 · 95.4th percentile
Published
2019-07-26T03:52Z
EPSS history
Timeline
  • 26 JUL 03:52Z
    In some circumstances, Craft 2 before 2.7.10 and 3 before 3.2.6 wasn't stripping EXIF data from user-uploaded images when it was configured to do so…
    cvelistv5