medium6.1
CVE-2017-1000042
Mapbox.js versions 1.x prior to 1.6.5 and 2.x prior to 2.1.7 are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via TileJSON N…
Impact
Mapbox.js versions 1.x prior to 1.6.5 and 2.x prior to 2.1.7 are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via TileJSON Name.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mapbox Project | Mapbox | Versions 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.1.0 |