CVE-2023-1974

Medium

Exposure of Sensitive Information Through Metadata in GitHub repository answerdev/answer prior to 1.0.8.

@huntrdev·CWE-1230·Published 2023-04-11

CVSS

6.5

EPSS

0.01

KEV

Exploits

cve.orgen

104 chars

Exposure of Sensitive Information Through Metadata in GitHub repository answerdev/answer prior to 1.0.8.

NVDen

104 chars

Exposure of Sensitive Information Through Metadata in GitHub repository answerdev/answer prior to 1.0.8.

OSV.deven

102 chars

Answer vulnerable to Exposure of Sensitive Information Through Metadata in github.com/answerdev/answer

GHSAen

187 chars

answerdev/answer is an open-source knowledge-based community software. Answer prior to 1.0.8 may expose sensitive information, such as EXIF data and GPS coordatinates, via image metadata.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.0	Primary	cve.org	7.7	—	—	CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
3.0	Primary	cve.org	7.7	—	—	CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H