CVE-2024-35627

The tileserver-gl map server (versions up to v4.4.10 ) is vulnerable to a cross-site scripting (XSS) vulnerability (CWE-79) located in the /data/v3/?key component. An attacker can inject malicious scripts via the key parameter, which may lead to the theft of sensitive information or the compromis...

TileServer GL security vulnerability

TileServer GL is an open source map server for vector blocks from the Maptiler team. A security vulnerability exists in TileServer GL v4.4.10 and earlier, which stems from a cross-site scripting XSS vulnerability in component /data/v3/?key...

CVE-2024-35627: Improper Neutralization of Input During Web Page Generation

tileserver-gl up to v4.4.10 was discovered to contain a cross-site scripting XSS vulnerability via the component /data/v3/?key...