CVE-2019-15740

MEDIUM

GitLab 7.9.0-12.2.1 - Exposure of Sensitive Information via EXIF Geolocation Data

Title source: llm
STIX 2.1

Description

An issue was discovered in GitLab Community and Enterprise Edition 7.9 through 12.2.1. EXIF Geolocation data was not being removed from certain image uploads.

References (2)

Core 2
Core References

Scores

CVSS v3 5.3
EPSS 0.0026
EPSS Percentile 49.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-200
Status published
Products (1)
gitlab/gitlab 7.9.0 - 12.0.8 (2 CPE variants)
Published Sep 16, 2019
Tracked Since Feb 18, 2026