| शीर्षक | givanz Vvveb Vvveb 1.0.7.2 Exposure of Sensitive Information Through Metadata |
|---|
| विवरण | Vvveb CMS fails to strip EXIF and other metadata from uploaded images, potentially exposing sensitive personal information. When users upload images containing metadata (such as GPS coordinates, camera details, timestamps, device information, or other PII), this information remains embedded and accessible to anyone who can download the images. The vulnerability affects all image upload functionality including product images, post/page media, profile pictures, and frontend assets. Attackers can extract this metadata from publicly accessible images to gather intelligence about users, their locations, devices, and other sensitive information that could be used for social engineering or targeted attacks. |
|---|
| स्रोत | ⚠️ https://gist.github.com/KhanMarshaI/9a1a5b72ff7a0a9d180ca77d26814bc7 |
|---|
| उपयोगकर्ता | KhanMarshal (UID 89610) |
|---|
| सबमिशन | 17/09/2025 12:13 PM (1 वर्ष पहले) |
|---|
| संयम | 26/09/2025 10:24 AM (9 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 325966 [givanz Vvveb तक 1.0.7.2 Image सूचना का प्रकटीकरण] |
|---|
| अंक | 20 |
|---|