CVE-2020-15500
1 advisory.
npm/tileserver-gl CVE-2020-15500: medium 6.1, EPSS 12.22%
Cross-site scripting in TileServer GL
Action: Upgrade tileserver-gl to 3.1.0 or later.
npm i tileserver-gl@3.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.1.0 | - |
Fixed versions
| 3.1.0 |
Sources
- osv: GHSA-3fr8-mwpp-8h9p
- https://nvd.nist.gov/vuln/detail/CVE-2020-15500
- https://github.com/maptiler/tileserver-gl/issues/461
- https://github.com/maptiler/tileserver-gl/commit/10431d70d0f0d7b7950ae2c02aea0850c7566621
- https://github.com/maptiler/tileserver-gl
- http://packetstormsecurity.com/files/162193/Tileserver-gl-3.0.0-Cross-Site-Scripting.html
CVE-2020-15500 · published · modified · JSON