Beveiligingsadvies

CVE-2025-44136

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-07-29 00:00:00

Laatst bijgewerkt 2025-07-29 17:34:31

Toegewezen door mitre

CVSS-score 9.8

Status PUBLISHED

Beschrijving

MapTiler Tileserver-php v2.0 is vulnerable to Cross Site Scripting (XSS). The GET parameter "layer" is reflected in an error message without html encoding. This leads to XSS and allows an unauthenticated attacker to execute arbitrary HTML or JavaScript code on a victim's browser.

← Alle CVE's bekijken Bekijk op cve.org ↗