An issue was discovered in server.js in TileServer GL through 3.0.0
published July 1, 2020
CVSS
—
EPSS
12%
Percentile
96.2
In the wild
Unconfirmed
What it is
An issue was discovered in server.js in TileServer GL through 3.0.0. The content of the key GET parameter is reflected unsanitized in an HTTP response for the application's main page, causing reflected XSS.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.12224 · 96.2th percentile
Published
2020-07-01T22:14Z
EPSS history
Timeline
01 JUL 22:14Z
An issue was discovered in server.js in TileServer GL through 3.0.0