CVE-2007-4542: XSS
Multiple cross-site scripting (XSS) vulnerabilities in MapServer before 4.10.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the (1) processLine function in maptemplate.c and the (2) writeError function in mapserv.c in the mapserv CGI program.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-4542?
CVE-2007-4542 has been classified with a low to medium severity due to its potential for cross-site scripting attacks.
How do I fix CVE-2007-4542?
To fix CVE-2007-4542, upgrade to MapServer version 4.10.4 or later to ensure vulnerabilities are patched.
What types of attacks can CVE-2007-4542 allow?
CVE-2007-4542 allows remote attackers to conduct cross-site scripting attacks by injecting arbitrary web scripts or HTML into the application.
Which versions of MapServer are affected by CVE-2007-4542?
CVE-2007-4542 affects MapServer versions before 4.10.3.
What are the vectors involved in CVE-2007-4542?
The vectors involved in CVE-2007-4542 include unspecified inputs to the processLine function in maptemplate.c and the writeError function in mapserv.c.