GHSA-j8cx-j9j2-f29wHigh

Insecure Storage of Sensitive Information in Microweber

Published
February 24, 2022
Last Modified
February 3, 2023

🔗 CVE IDs covered (1)

CVE-2022-0724 →

📋 Description

Microweber prior to version 1.3 does not strip images of EXIF data, exposing information about users' locations, device hardware, and device software.

🎯 Affected products1

  • composer/microweber/microweber:< 1.3

🔗 References (4)