PT-2025-31224 · Maptiler · Maptiler Tileserver-Php

Name of the Vulnerable Software and Affected Versions: MapTiler Tileserver-php version 2.0 Description: MapTiler Tileserver-php version 2.0 is vulnerable to Directory Traversal. The renderTile function within tileserver.php is responsible for delivering tiles stored as files on the server via web...

CVE-2025-44136

MapTiler Tileserver-php v2.0 is vulnerable to Cross Site Scripting XSS. The GET parameter "layer" is reflected in an error message without html encoding. This leads to XSS and allows an unauthenticated attacker to execute arbitrary HTML or JavaScript code on a victim's browser...

Exploit for Path Traversal in Maptiler Tileserver_Php

CVE-2025-44137 Unauthenticated File Read in MapTiler Tileserve...

Exploit for Cross-site Scripting in Maptiler Tileserver_Php

CVE-2025-44136 Unauthenticated XSS in MapTiler Tileserver-php...

CVE-2025-48387 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, jitsucom-jitsu, tileserver-gl, tileserver-gl-fips, sqlpad, code-server, gitlab-rails-ce-fips, kibana...

GHSA-8CJ5-5RVV-WF4V vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, jitsucom-jitsu, tileserver-gl, tileserver-gl-fips, sqlpad, code-server, gitlab-rails-ce-fips, kibana...

GHSA-8CJ5-5RVV-WF4V vulnerabilities

Vulnerabilities for packages: tileserver-gl, code-server, sqlpad, jitsucom-jitsu...

CVE-2025-48387 vulnerabilities

Vulnerabilities for packages: tileserver-gl, code-server, sqlpad, jitsucom-jitsu...

CVE-2020-15500

An issue was discovered in server.js in TileServer GL through 3.0.0. The content of the key GET parameter is reflected unsanitized in an HTTP response for the application's main page, causing reflected XSS...

GHSA-75V8-2H7P-7M2M vulnerabilities

Vulnerabilities for packages: tileserver-gl...

CVE-2025-46653 vulnerabilities

Vulnerabilities for packages: tileserver-gl...

CVE-2025-46653 vulnerabilities

Vulnerabilities for packages: tileserver-gl, tileserver-gl-fips...

GHSA-75V8-2H7P-7M2M vulnerabilities

Vulnerabilities for packages: tileserver-gl, tileserver-gl-fips...

CVE-2024-12905 vulnerabilities

Vulnerabilities for packages: tileserver-gl, code-server, sqlpad...

GHSA-PQ67-2WWV-3XJX vulnerabilities

Vulnerabilities for packages: tileserver-gl, code-server, sqlpad...

CVE-2024-12905 vulnerabilities

Vulnerabilities for packages: tileserver-gl, tileserver-gl-fips, sqlpad, code-server, kibana...

GHSA-PQ67-2WWV-3XJX vulnerabilities

Vulnerabilities for packages: tileserver-gl, tileserver-gl-fips, sqlpad, code-server, kibana...

CVE-2024-35627

tileserver-gl up to v4.4.10 was discovered to contain a cross-site scripting XSS vulnerability via the component /data/v3/?key...

GHSA-RHX6-C78J-4Q9W vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, arangodb, thingsboard, tileserver-gl, kubeflow-centraldashboard, sqlpad, grafana-image-renderer, argo-workflows, tileserver-gl-fips...

CVE-2024-21538 vulnerabilities

Vulnerabilities for packages: renovate, arangodb, pgadmin4, ts-patch, tileserver-gl, eslint, node-gyp, opensearch-dashboards, tileserver-gl-fips, kubeflow-katib, lerna, opensearch-dashboards-fips, py3-captum, airflow, sqlpad, argo-workflows, kibana, graalvm...