Advisories · Technology
MapServer.
Every CVE that names MapServer among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
MapServer: Reflected XSS in OpenLayers HTML Output via `HTTP_X_FORWARDED_HOST`
- MapServer
- Cross-site scripting (XSS)
- CVSS 8.2 High
MapServer: PostGIS Numeric Filter Value SQL Injection in MapServer Runtime Query Translation
- MapServer
- SQL injection
- CVSS 7.5 High
MapServer: NULL pointer dereference in SLD `<ElseFilter>` rule parsing reachable via WMS `SLD_BODY`
- MapServer
- Memory corruption
- CWE-129
- CVSS 6.1 Medium
MapServer: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in OpenLayers viewer
- MapServer
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
MapServer has heap buffer overflow in SLD `Categorize` Threshold parsing
- MapServer
- Memory corruption
- CVSS 8.9 High
MapServer - WFS XML Filter Query SQL injection
- MapServer
- SQL injection