cvedb.io
CVE-2017-1000024
HIGH · CVSS 7.5
EPSS exploitation probability: 0%
Published 2017-07-17T13:18:16.673 · Last modified 2026-06-17T00:58:36.377

Summary

Shotwell version 0.24.4 or earlier and 0.25.3 or earlier is vulnerable to an information disclosure in the web publishing plugins resulting in potential password and oauth token plaintext transmission

Affected products

gnome — shotwell

Does this affect you?

Add your gear to cvedb and we'll alert you only when gnome ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.