CVE-2017-1000024

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-07-17 · updated 2026-06-17
Weakness: CWE-319

Description

Shotwell version 0.24.4 or earlier and 0.25.3 or earlier is vulnerable to an information disclosure in the web publishing plugins resulting in potential password and oauth token plaintext transmission

Affected products

GNOME Shotwell: from 0.24.0 through 0.24.4; from 0.25.0 through 0.25.3

References

https://mail.gnome.org/archives/shotwell-list/2017-January/msg00048.html
https://mail.gnome.org/archives/shotwell-list/2017-January/msg00048.html

Get alerted when CVE-2017-1000024 or the next vulnerability affects your stack