| 제목 | LearnHouse learnhouse 98dfad76aad70711a8113f6c1fdabfccf10509ca Exposure of Sensitive Information Through Metadata |
|---|
| 설명 | LearnHouse fails to sanitize EXIF metadata from user-uploaded images, exposing sensitive information including GPS coordinates, device details, camera information, and timestamps. When users upload profile pictures or course-related images captured from mobile devices, the platform stores and serves these files without stripping embedded metadata. Since LearnHouse courses can be publicly listed and indexed by search engines, any unauthorized actor can download these images and extract personal information using standard EXIF viewers. This poses significant privacy and safety risks, particularly for students, educators, and professionals using the platform. Attackers can determine users' home addresses, daily routines, and device information, enabling doxxing, stalking, or targeted harassment. The vulnerability affects all file upload endpoints and impacts the confidentiality of potentially thousands of users, including minors in educational settings. |
|---|
| 원천 | ⚠️ https://gist.github.com/KhanMarshaI/4a89e9d807094b6dd4a138bc5664e748 |
|---|
| 사용자 | KhanMarshal (UID 89610) |
|---|
| 제출 | 2025. 10. 13. AM 11:58 (6 개월 ago) |
|---|
| 모더레이션 | 2025. 10. 26. PM 05:08 (13 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 329947 [LearnHouse 까지 98dfad76aad70711a8113f6c1fdabfccf10509ca Image 정보 공개] |
|---|
| 포인트들 | 20 |
|---|