En bref
- CVE-2017-1000426 est une vulnérabilité MOYENNE (CVSS 6.1) touchant mapproxy, mapproxy (omniscale).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.78%, plus élevée que 56.3% des vulnérabilités.
- Correctif : mettre à jour vers 1.11.1 ou plus récent.
| Package | Affected versions | Patched versions |
|---|
| mapproxy PyPI | < 1.11.1
| 1.11.1
|
| mapproxy | ≤ 1.10.3
| No fix yet |
Description
MapProxy version 1.11.1 and older are vulnerable to cross-site scripting in the demo service resulting in possible information disclosure. An incomplete fix was released in v1.10.4, and a complete fix was released in v1.11.1.
NVD description
MapProxy version 1.10.3 and older is vulnerable to a Cross Site Scripting attack in the demo service resulting in possible information disclosure.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free