CVE-2017-1000043

Mapbox.js versions 1.x prior to 1.6.6 and 2.x prior to 2.2.4 are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via TileJSON name and map share control

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2017-07-17

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Mapbox.js (Mapbox)

References

• https://hackerone.com/reports/99245
• https://nodesecurity.io/advisories/74