Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-55hv-3q63-6xmh

Опубликовано: 20 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 5.3

Описание

Capgo before 12.128.2 fails to strip EXIF metadata including GPS geolocation data from uploaded images, allowing information disclosure. Attackers can download uploaded images and extract precise latitude and longitude coordinates revealing user physical location at capture time.

Capgo before 12.128.2 fails to strip EXIF metadata including GPS geolocation data from uploaded images, allowing information disclosure. Attackers can download uploaded images and extract precise latitude and longitude coordinates revealing user physical location at capture time.

EPSS

Процентиль: 27%
0.00343
Низкий

6.9 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 5.3
nvd
3 месяца назад

Capgo before 12.128.2 fails to strip EXIF metadata including GPS geolocation data from uploaded images, allowing information disclosure. Attackers can download uploaded images and extract precise latitude and longitude coordinates revealing user physical location at capture time.

EPSS

Процентиль: 27%
0.00343
Низкий

6.9 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-200