CVE-2017-1000426 - MapProxy version 1.10.3 and older is vulnerable to a Cross Site Scripting attack in the demo service resulting in possible information disclosure

MEDIUM

MapProxy version 1.10.3 and older is vulnerable to a Cross Site Scripting attack in the demo service resulting in possible information disclosure

Published Jan 2, 2018

6.1

MEDIUM

CVSS 3.1

EPSS 0.78%

MapProxy version 1.10.3 and older is vulnerable to a Cross Site Scripting attack in the demo service resulting in possible information disclosure.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-3888		Advisory
https://github.com/advisories/GHSA-g4rw-82hq-8jpr		Advisory
https://github.com/mapproxy/mapproxy/commit/420412aad45171e05752007a0a2350c03c28dfd8
https://github.com/mapproxy/mapproxy/commit/436c8f489761d1b4ee22b2440b53cc96bbc28aea
https://github.com/mapproxy/mapproxy/issues/322		x_refsource_CONFIRMExploitIssue TrackingMitigationPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-1000426