Gnome Shotwell vulnerabilities

2 vulnerabilities

Known vulnerabilities in Gnome Shotwell, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3CVE-2016-1000033debianshotwell+3
EPSS score
0.87%
Shotwell version 0.22.0 (and possibly other versions) is vulnerable to a TLS/SSL certification validation flaw resulting in a potential for man in the middle attacks.7.5CVE-2017-1000024debianshotwell+7
EPSS score
1.21%
Shotwell version 0.24.4 or earlier and 0.25.3 or earlier is vulnerable to an information disclosure in the web publishing plugins resulting in potential password and oauth token plaintext transmission