medium6.1
CVE-2024-35627
tileserver-gl up to v4.4.10 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /data/v3/?key.
Impact
tileserver-gl up to v4.4.10 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /data/v3/?key.
Affected products
| Product | Affected versions |
|---|---|
| Tileserver-Gl | before 4.4.10 |
Versions were read from the advisory text. No structured product data has been published for this record yet.