In breve
- CVE-2017-1000426 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda mapproxy, mapproxy (omniscale).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.78%, superiore al 56.3% delle vulnerabilità.
- Correzione: aggiornare a 1.11.1 o successiva.
| Package | Affected versions | Patched versions |
|---|
| mapproxy PyPI | < 1.11.1
| 1.11.1
|
| mapproxy | ≤ 1.10.3
| No fix yet |
Description
MapProxy version 1.11.1 and older are vulnerable to cross-site scripting in the demo service resulting in possible information disclosure. An incomplete fix was released in v1.10.4, and a complete fix was released in v1.11.1.
NVD description
MapProxy version 1.10.3 and older is vulnerable to a Cross Site Scripting attack in the demo service resulting in possible information disclosure.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free