$150 Bug Bounty POC | EXIF Geolocation Data Not Stripped From Uploaded Images | Easy Win
Vulnerability Name :
Geolocation data not stripped from images.
When a user uploads an image in example.com, the uploaded image’s EXIF Geolocation Data does not get stripped. As a result, anyone can get sensitive information of example.com users like their Geolocation, their Device information like Device Name, Version, Software & Software version used, etc.
Images you can use: https://github.com/ianare/exif-sample...