CVE-2022-2815.yml

---
gem: publify_core
cve: 2022-2815
ghsa: 79wq-g4v9-gfj4
url: https://github.com/publify/publify/commit/af69097d349f4c00f244c51cd3c3e937fd3387cd
title: Publify Core does not strip metadata from images
date: 2023-01-14
description: |
  Insecure Storage of Sensitive Information in GitHub repository publify/publify
  prior to 9.2.10.
cvss_v3: 6.5
patched_versions:
  - ">= 9.2.10"
related:
  url:
    - https://huntr.dev/bounties/22fdcc39-8c1a-4e4c-8eae-be3fd764f8b4
    - https://github.com/publify/publify_core/commit/33f897c12b6efdcdfd8cf9df924deba0f878b71e