NetSight
medium6.1

CVE-2017-1000043

Mapbox.js versions 1.x prior to 1.6.6 and 2.x prior to 2.2.4 are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via TileJSON n…

Impact

Mapbox.js versions 1.x prior to 1.6.6 and 2.x prior to 2.2.4 are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via TileJSON name and map share control

Affected products

VendorProductAffected versions
MapboxMapbox.Js
from 1.0.0 before 1.6.6
from 2.0.0 before 2.2.4

Weakness classification

References