Executive Summary

Informations
NameCVE-2019-10109First vendor Publication2019-05-15
VendorCveLast vendor Modification2019-05-16

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:N/A:N)
Cvss Base Score5Attack RangeNetwork
Cvss Impact Score2.9Attack ComplexityLow
Cvss Expoit Score10AuthenticationNone Required
Calculate full CVSS 2.0 Vectors scores

Detail

An Information Exposure issue (issue 1 of 2) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. EXIF geolocation data were not removed from images when uploaded to GitLab. As a result, anyone with access to the uploaded image could obtain its geolocation, device, and software version data (if present).

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10109

CWE : Common Weakness Enumeration

%idName
100 %CWE-200Information Exposure

CPE : Common Platform Enumeration

TypeDescriptionCount
Application1426

Sources (Detail)

SourceUrl
MISC https://about.gitlab.com/2019/04/01/security-release-gitlab-11-dot-9-dot-4-re...
https://about.gitlab.com/blog/categories/releases/
https://gitlab.com/gitlab-org/gitlab-ce/issues/54220
https://gitlab.com/gitlab-org/gitlab-ce/issues/55469

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
DateInformations
2019-10-04 12:10:49
  • Multiple Updates
2019-09-26 12:10:56
  • Multiple Updates
2019-06-04 12:09:37
  • Multiple Updates
2019-05-30 12:09:42
  • Multiple Updates
2019-05-16 21:19:32
  • Multiple Updates
2019-05-16 05:18:49
  • First insertion