Skip to main content

Geoportal Toolkit

2 CVEs product

Monthly

CVE-2024-6450 MEDIUM This Month

HyperView Geoportal Toolkit in versions lower than 8.5.0 is vulnerable to Reflected Cross-Site Scripting (XSS). Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Geoportal Toolkit
NVD
CVSS 4.0
5.3
EPSS
0.3%
CVE-2024-6449 MEDIUM This Month

HyperView Geoportal Toolkit in versions lower than 8.5.0 does not restrict cross-domain requests when fetching remote content pointed by one of GET request parameters. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Cors Misconfiguration Geoportal Toolkit
NVD
CVSS 4.0
5.3
EPSS
0.4%
EPSS 0% CVSS 5.3
MEDIUM This Month

HyperView Geoportal Toolkit in versions lower than 8.5.0 is vulnerable to Reflected Cross-Site Scripting (XSS). Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Geoportal Toolkit
NVD
EPSS 0% CVSS 5.3
MEDIUM This Month

HyperView Geoportal Toolkit in versions lower than 8.5.0 does not restrict cross-domain requests when fetching remote content pointed by one of GET request parameters. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Cors Misconfiguration Geoportal Toolkit
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy