CVE-2025-10453

CVE-2025-10453 affects O’View MapServer by PilotGaea Technologies. The connected sources confirm a Server-Side Request Forgery (SSRF) vulnerability that can be exploited by unauthenticated remote attackers to probe internal networks. The root cause is SSRF within the MapServer component, enabling...

CVE-2025-10453 PilotGaea Technologies｜O'View MapServer - Server-Side Request Forgery

O'View MapServer developed by PilotGaea Technologies has a Server-Side Request Forgery vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to probe internal network...

CVE-2025-10453 PilotGaea Technologies｜O'View MapServer - Server-Side Request Forgery

O'View MapServer developed by PilotGaea Technologies has a Server-Side Request Forgery vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to probe internal network...

PilotGaea OView MapServer 代码问题漏洞

PilotGaea OView MapServer is a Geographic Information System GIS map server software from PilotGaea in Taiwan, China. A code issue vulnerability exists in PilotGaea OView MapServer, which can be exploited by an unauthenticated, remote attacker to probe the internal network using a server-side...

CVE-2025-10453: Server-Side Request Forgery (SSRF)

O'View MapServer developed by PilotGaea Technologies has a Server-Side Request Forgery vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to probe internal network...

PT-2025-37454

Name of the Vulnerable Software and Affected Versions: O'View MapServer affected versions not specified Description: O'View MapServer developed by PilotGaea Technologies contains a Server-Side Request Forgery vulnerability. This allows unauthenticated remote attackers to probe internal networks...

Linux Distros Unpatched Vulnerability : CVE-2021-32062

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MapServer before 7.0.8, 7.1.x and 7.2.x before 7.2.3, 7.3.x and 7.4.x before 7.4.5, and 7.5.x and 7.6.x before 7.6.3 does not properly enforce the MSMAPNOPATH a...

mapserver:mapfuzzer: Heap-use-after-free in msyy_switch_to_buffer

Project: https://github.com/MapServer/MapServer.git Detailed Report: https://oss-fuzz.com/testcase?key=4592302307016704 Project: mapserver Fuzzing Engine: afl Fuzz Target: mapfuzzer Job Type: aflasanmapserver Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x606000005f1c...

Debian: Security Advisory (DSA-2079-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-790-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-734-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2007-4542

Multiple cross-site scripting XSS vulnerabilities in MapServer before 4.10.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the 1 processLine function in maptemplate.c and the 2 writeError function in mapserv.c in the mapserv CGI program...

SUSE CVE-2021-32062

MapServer before 7.0.8, 7.1.x and 7.2.x before 7.2.3, 7.3.x and 7.4.x before 7.4.5, and 7.5.x and 7.6.x before 7.6.3 does not properly enforce the MSMAPNOPATH and MSMAPPATTERN restrictions that are intended to control the locations from which a mapfile may be loaded with MapServer CGI...

PT-2022-36684 · Git +1 · Mapserver

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A crash occurred due to an unknown read issue. The crash state includes functions such as loadSymbol, loadMapInternal, and msLoadMap. Recommendations: At the moment, there is no...

mapserver:mapfuzzer: Crash in loadSymbol

Project: https://github.com/MapServer/MapServer.git Detailed Report: https://oss-fuzz.com/testcase?key=4859428566597632 Project: mapserver Fuzzing Engine: libFuzzer Fuzz Target: mapfuzzer Job Type: libfuzzerasanmapserver Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61e000001cb0...

PT-2022-36677 · Git +1 · Mapserver

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow WRITE 1 crash has been reported. The crash state includes function calls to msyylex, loadLayer, and loadMapInternal. No informatio...

mapserver:mapfuzzer: Heap-buffer-overflow in msyylex

Project: https://github.com/MapServer/MapServer.git Detailed Report: https://oss-fuzz.com/testcase?key=4866656921059328 Project: mapserver Fuzzing Engine: afl Fuzz Target: mapfuzzer Job Type: aflasanmapserver Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x6290000001f...

mapserver:mapfuzzer: Heap-buffer-overflow in msSetError

Project: https://github.com/MapServer/MapServer.git Detailed Report: https://oss-fuzz.com/testcase?key=4782407505281024 Project: mapserver Fuzzing Engine: afl Fuzz Target: mapfuzzer Job Type: aflasanmapserver Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x6110000003c0...

mapserver:mapfuzzer: Heap-use-after-free in msFreeMap

Project: https://github.com/MapServer/MapServer.git Detailed Report: https://oss-fuzz.com/testcase?key=5877913782452224 Project: mapserver Fuzzing Engine: afl Fuzz Target: mapfuzzer Job Type: aflasanmapserver Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6030001d2f60...

PT-2022-36662 · Git +1 · Mapserver

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow WRITE 1 crash has been reported. The crash involves the functions msyylex, loadMapInternal, and msLoadMap. No information is...