CVE-2024-35627

The tileserver-gl map server, in versions up to v4.4.10 , is vulnerable to a cross-site scripting (XSS) flaw within the /data/v3/?key component. An attacker can inject malicious scripts via the key parameter, which may lead to the compromise of user sessions or the theft of sensitive information....

CVE-2024-35627: Improper Neutralization of Input During Web Page Generation

tileserver-gl up to v4.4.10 was discovered to contain a cross-site scripting XSS vulnerability via the component /data/v3/?key...

TileServer GL 安全漏洞

TileServer GL is an open source map server for vector blocks from the Maptiler team. A security vulnerability exists in TileServer GL v4.4.10 and earlier, which stems from a cross-site scripting XSS vulnerability in component /data/v3/?key...