CVE-2017-1000042
Time Line
Published
2024-03-19
Updated
2024-03-19
Firt exploit
2024-03-19
Overview
Descriptions (2)
NVD, NVD
CWE (1)
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC (-)
Risk
CVSS Score
6.1 Medium
SSVC
-
KEV
-
EPSS
0.1%
Affected Products (-)
Vendors (1)
mapbox_project
Products (1)
mapbox
Versions (28)
1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.1.0, 1.2.0, 1.3.0, 1.3.1, 1.4.0, 1.4.1, 1.4.2, 1.5.0, 1.5.1, 1.5.2, 1.6.0, 1.6.1, 1.6.2, 1.6.4, 2.0.0, 2.0.1, 2.1.0, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5, 2.1.6
Intel Resources (-)
Advisories (-)
-
Exploits (-)
-
Plugins (-)
-
References (2)
General (1)
nodesecurity
Exploits & POcs (1)
hackerone
Patches (-)
Advisories (-)
Summary
Descriptions
Mapbox.js versions 1.x prior to 1.6.5 and 2.x prior to 2.1.7 are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via TileJSON Name.
MapBox.js versiones 1.x anterior a 1.6.5 y 2.x anterior a 2.1.7, son vulnerables a un ataque de tipo cross-site-scripting en ciertos escenarios de uso poco común por medio del Nombre TileJSON.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2017-07-10 CVE Reserved
- 2017-07-13 CVE Published
- 2024-08-05 CVE Updated
- 2024-08-05 First Exploit
- 2024-12-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
Threat Intelligence Resources (0)
| Select | Title | Date |
|---|
Security Advisory details:
Select an advisory to view details here.
| Select | Title | Date |
|---|
Select an exploit to view details here.
References (2)
| URL | Tag | Source |
|---|---|---|
| https://nodesecurity.io/advisories/49 | Third Party Advisory |
| URL | Date | SRC |
|---|---|---|
| https://hackerone.com/reports/54327 | 2024-08-05 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Mapbox Project Search vendor "Mapbox Project" | Mapbox Search vendor "Mapbox Project" for product "Mapbox" | 1.0.0 Search vendor "Mapbox Project" for product "Mapbox" and version "1.0.0" | - |
Affected
| ||||||
| Mapbox Project Search vendor "Mapbox Project" | Mapbox Search vendor "Mapbox Project" for product "Mapbox" | 1.0.1 Search vendor "Mapbox Project" for product "Mapbox" and version "1.0.1" | - |
Affected
| ||||||
| Mapbox Project Search vendor "Mapbox Project" | Mapbox Search vendor "Mapbox Project" for product "Mapbox" | 1.0.2 Search vendor "Mapbox Project" for product "Mapbox" and version "1.0.2" | - |
Affected
| ||||||
| Mapbox Project Search vendor "Mapbox Project" | Mapbox Search vendor "Mapbox Project" for product "Mapbox" | 1.0.3 Search vendor "Mapbox Project" for product "Mapbox" and version "1.0.3" | - |
Affected
| ||||||
| Mapbox Project Search vendor "Mapbox Project" | Mapbox Search vendor "Mapbox Project" for product "Mapbox" | 1.0.4 Search vendor "Mapbox Project" for product "Mapbox" and version "1.0.4" | - |
Affected
| ||||||
| Mapbox Project Search vendor "Mapbox Project" | Mapbox Search vendor "Mapbox Project" for product "Mapbox" | 1.1.0 Search vendor "Mapbox Project" for product "Mapbox" and version "1.1.0" | - |
Affected
| ||||||
| Mapbox Project Search vendor "Mapbox Project" | Mapbox Search vendor "Mapbox Project" for product "Mapbox" | 1.2.0 Search vendor "Mapbox Project" for product "Mapbox" and version "1.2.0" | - |
Affected
| ||||||
| Mapbox Project Search vendor "Mapbox Project" | Mapbox Search vendor "Mapbox Project" for product "Mapbox" | 1.3.0 Search vendor "Mapbox Project" for product "Mapbox" and version "1.3.0" | - |
Affected
| ||||||
| Mapbox Project Search vendor "Mapbox Project" | Mapbox Search vendor "Mapbox Project" for product "Mapbox" | 1.3.1 Search vendor "Mapbox Project" for product "Mapbox" and version "1.3.1" | - |
Affected
| ||||||
| Mapbox Project Search vendor "Mapbox Project" | Mapbox Search vendor "Mapbox Project" for product "Mapbox" | 1.4.0 Search vendor "Mapbox Project" for product "Mapbox" and version "1.4.0" | - |
Affected
| ||||||
| Mapbox Project Search vendor "Mapbox Project" | Mapbox Search vendor "Mapbox Project" for product "Mapbox" | 1.4.1 Search vendor "Mapbox Project" for product "Mapbox" and version "1.4.1" | - |
Affected
| ||||||
| Mapbox Project Search vendor "Mapbox Project" | Mapbox Search vendor "Mapbox Project" for product "Mapbox" | 1.4.2 Search vendor "Mapbox Project" for product "Mapbox" and version "1.4.2" | - |
Affected
| ||||||
| Mapbox Project Search vendor "Mapbox Project" | Mapbox Search vendor "Mapbox Project" for product "Mapbox" | 1.5.0 Search vendor "Mapbox Project" for product "Mapbox" and version "1.5.0" | - |
Affected
| ||||||
| Mapbox Project Search vendor "Mapbox Project" | Mapbox Search vendor "Mapbox Project" for product "Mapbox" | 1.5.1 Search vendor "Mapbox Project" for product "Mapbox" and version "1.5.1" | - |
Affected
| ||||||
| Mapbox Project Search vendor "Mapbox Project" | Mapbox Search vendor "Mapbox Project" for product "Mapbox" | 1.5.2 Search vendor "Mapbox Project" for product "Mapbox" and version "1.5.2" | - |
Affected
| ||||||
| Mapbox Project Search vendor "Mapbox Project" | Mapbox Search vendor "Mapbox Project" for product "Mapbox" | 1.6.0 Search vendor "Mapbox Project" for product "Mapbox" and version "1.6.0" | - |
Affected
| ||||||
| Mapbox Project Search vendor "Mapbox Project" | Mapbox Search vendor "Mapbox Project" for product "Mapbox" | 1.6.0 Search vendor "Mapbox Project" for product "Mapbox" and version "1.6.0" | beta |
Affected
| ||||||
| Mapbox Project Search vendor "Mapbox Project" | Mapbox Search vendor "Mapbox Project" for product "Mapbox" | 1.6.0 Search vendor "Mapbox Project" for product "Mapbox" and version "1.6.0" | beta0 |
Affected
| ||||||
| Mapbox Project Search vendor "Mapbox Project" | Mapbox Search vendor "Mapbox Project" for product "Mapbox" | 1.6.1 Search vendor "Mapbox Project" for product "Mapbox" and version "1.6.1" | - |
Affected
| ||||||
| Mapbox Project Search vendor "Mapbox Project" | Mapbox Search vendor "Mapbox Project" for product "Mapbox" | 1.6.2 Search vendor "Mapbox Project" for product "Mapbox" and version "1.6.2" | - |
Affected
| ||||||
| Mapbox Project Search vendor "Mapbox Project" | Mapbox Search vendor "Mapbox Project" for product "Mapbox" | 1.6.2 Search vendor "Mapbox Project" for product "Mapbox" and version "1.6.2" | beta0 |
Affected
| ||||||
| Mapbox Project Search vendor "Mapbox Project" | Mapbox Search vendor "Mapbox Project" for product "Mapbox" | 1.6.4 Search vendor "Mapbox Project" for product "Mapbox" and version "1.6.4" | - |
Affected
| ||||||
| Mapbox Project Search vendor "Mapbox Project" | Mapbox Search vendor "Mapbox Project" for product "Mapbox" | 2.0.0 Search vendor "Mapbox Project" for product "Mapbox" and version "2.0.0" | - |
Affected
| ||||||
| Mapbox Project Search vendor "Mapbox Project" | Mapbox Search vendor "Mapbox Project" for product "Mapbox" | 2.0.0 Search vendor "Mapbox Project" for product "Mapbox" and version "2.0.0" | beta0 |
Affected
| ||||||
| Mapbox Project Search vendor "Mapbox Project" | Mapbox Search vendor "Mapbox Project" for product "Mapbox" | 2.0.0 Search vendor "Mapbox Project" for product "Mapbox" and version "2.0.0" | beta1 |
Affected
| ||||||
| Mapbox Project Search vendor "Mapbox Project" | Mapbox Search vendor "Mapbox Project" for product "Mapbox" | 2.0.1 Search vendor "Mapbox Project" for product "Mapbox" and version "2.0.1" | - |
Affected
| ||||||
| Mapbox Project Search vendor "Mapbox Project" | Mapbox Search vendor "Mapbox Project" for product "Mapbox" | 2.1.0 Search vendor "Mapbox Project" for product "Mapbox" and version "2.1.0" | - |
Affected
| ||||||
| Mapbox Project Search vendor "Mapbox Project" | Mapbox Search vendor "Mapbox Project" for product "Mapbox" | 2.1.1 Search vendor "Mapbox Project" for product "Mapbox" and version "2.1.1" | - |
Affected
| ||||||
| Mapbox Project Search vendor "Mapbox Project" | Mapbox Search vendor "Mapbox Project" for product "Mapbox" | 2.1.2 Search vendor "Mapbox Project" for product "Mapbox" and version "2.1.2" | - |
Affected
| ||||||
| Mapbox Project Search vendor "Mapbox Project" | Mapbox Search vendor "Mapbox Project" for product "Mapbox" | 2.1.3 Search vendor "Mapbox Project" for product "Mapbox" and version "2.1.3" | - |
Affected
| ||||||
| Mapbox Project Search vendor "Mapbox Project" | Mapbox Search vendor "Mapbox Project" for product "Mapbox" | 2.1.4 Search vendor "Mapbox Project" for product "Mapbox" and version "2.1.4" | - |
Affected
| ||||||
| Mapbox Project Search vendor "Mapbox Project" | Mapbox Search vendor "Mapbox Project" for product "Mapbox" | 2.1.5 Search vendor "Mapbox Project" for product "Mapbox" and version "2.1.5" | - |
Affected
| ||||||
| Mapbox Project Search vendor "Mapbox Project" | Mapbox Search vendor "Mapbox Project" for product "Mapbox" | 2.1.6 Search vendor "Mapbox Project" for product "Mapbox" and version "2.1.6" | - |
Affected
| ||||||