Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Chevereto Privacy Bypass via Unauthenticated JSON API Leads to Image Metadata Leakage

github.com 2026-07-08 查看中文 →
Security Advisory Medium Chevereto
Affected:
  • chevereto: >= 3.7.5, < 4.5.4
  • chevereto/chevereto: >= 4.0.5, < 4.5.4
  • rodber/chevereto-free: >= 1.0.0
Fixed in:
  • chevereto: 4.5.4
  • chevereto/chevereto: 4.5.4
Referenced CVEs: CVE-2026-55417
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.
More from this source
EmployeeRecruitmentSystem V1.0 Pre-Auth SQL Injection Analysis and POC 2026-10-25 Krupalibh EmployeeRecruitmentSystem V1.0 registerform2.php SQL Injection with POC 2026-10-25 knapshull EmployeeRecruitmentSystem v1.0 SQL Injection Vulnerability Analysis and POC 2026-10-25 WordPress Contact Form 7 Pre-Auth RCE Vulnerability (v<5.6.2) with POC 2026-10-25 VooChat Plugin DOM XSS in widget.html with POC 2026-10-25
Offline Archive

Offline screenshot & PDF are Pro-exclusive

Upgrade to Pro