PT-2017-10753

Name of the Vulnerable Software and Affected Versions Mapbox.js versions 1.x prior to 1.6.6 Mapbox.js versions 2.x prior to 2.2.4 Description The issue concerns a cross-site-scripting attack in certain uncommon usage scenarios via TileJSON name and map share control. If L.mapbox.map or...