CVE-2025-44137

CVE-2025-44137 MapTiler Tileserver-php v2.0 における認証なしファイル読み取り 説明 MapTiler Tileserver-php v2.0 はディレクトリトラバーサルに対して脆弱です。tileserver.php 内の renderTile 関数は、Web リクエストを介してサーバー上のファイルとして保存されたタイルを配信します。ファイルへのパスを作成する際に '../' を使用できるため、Web サーバー上の任意のファイルを読み取ることが可能です。 影響を受ける GET...

VulnCheck KEV: CVE-2025-44137

MapTiler Tileserver-php v2.0 is vulnerable to Directory Traversal. The renderTile function within tileserver.php is responsible for delivering tiles that are stored as files on the server via web request. Creating the path to a file allows the insertion of "../" and thus read any file on the web...

CVE-2025-44137: Improper Limitation of a Pathname to a Restricted Directory

MapTiler Tileserver-php v2.0 is vulnerable to Directory Traversal. The renderTile function within tileserver.php is responsible for delivering tiles that are stored as files on the server via web request. Creating the path to a file allows the insertion of "../" and thus read any file on the web...

TileServer PHP 安全漏洞

TileServer PHP is a folder hosting software from MapTiler Open Source. A security vulnerability exists in TileServer PHP version v2.0, which stems from a path traversal allowed by the renderTile function that could lead to reading arbitrary files...

CVE-2025-44137

MapTiler Tileserver-php v2.0 is vulnerable to Directory Traversal. The renderTile function within tileserver.php is responsible for delivering tiles that are stored as files on the server via web request. Creating the path to a file allows the insertion of "../" and thus read any file on the web...