Answer vulnerable to Exposure of Sensitive Information Through Metadata

보통 6.5CVE-2023-1974 · GHSA-8jg3-rx43-3fv4 · GO-2023-1718 · Published 11/04/2023 · updated 17/06/2026

요약

CVE-2023-1974은(는) github.com/answerdev/answer, answer (answer)에 영향을 주는 보통 (CVSS 6.5) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 0.60%, 전체 취약점의 48.5%보다 높음.
조치: 1.0.8 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
github.com/answerdev/answer Go	`< 1.0.8`	`1.0.8`
answer answer	`< 1.0.8`	`1.0.8`

Description

answerdev/answer is an open-source knowledge-based community software. Answer prior to 1.0.8 may expose sensitive information, such as EXIF data and GPS coordatinates, via image metadata.

NVD description

Exposure of Sensitive Information Through Metadata in GitHub repository answerdev/answer prior to 1.0.8.

References

nvd.nist.gov/vuln/detail/CVE-2023-1974 · ADVISORY
answerdev/answer commit ac3f2f0 · WEB
answerdev/answer · PACKAGE
huntr.dev/bounties/852781c6-9cc8-4d25-9336-bf3cb8ee3439 · WEB
GitHub Advisory GHSA-8jg3-rx43-3fv4 · ADVISORY

github.com/answerdev/answer의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

github.com/answerdev/answer

< 1.0.8

1.0.8

answer

< 1.0.8

1.0.8

Description

answerdev/answer is an open-source knowledge-based community software. Answer prior to 1.0.8 may expose sensitive information, such as EXIF data and GPS coordatinates, via image metadata.

NVD description

Exposure of Sensitive Information Through Metadata in GitHub repository answerdev/answer prior to 1.0.8.

github.com/answerdev/answer의 다른 취약점

모두 보기 →