CVE-2017-1000024: Gnome Shotwell

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Shotwell version 0.24.4 or earlier and 0.25.3 or earlier is vulnerable to an information disclosure in the web publishing plugins resulting in potential password and oauth token plaintext transmission

Affected products

• Gnome Shotwell: from 0.24.0, up to and including 0.24.4; from 0.25.0, up to and including 0.25.3

Published 2017-07-17. Last modified 2026-06-17.