| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 11.8.0, < 11.8.4≥ 11.9.0, < 11.9.2< 11.7.8 | 11.8.411.9.211.7.8 |
An Information Exposure issue (issue 1 of 2) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. EXIF geolocation data were not removed from images when uploaded to GitLab. As a result, anyone with access to the uploaded image could obtain its geolocation, device, and software version data (if present).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free