Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 11 | mapserver | 7.6.2-1+deb11u1 |
Vulnerabilities 2
-
High 8.9
MapServer - WFS XML Filter Query SQL injection
MapServer is a system for developing web-based GIS applications. Prior to 8.4.1, the XML Filter Query directive PropertyName is vulnerably to Boolean-based SQL injection. It seems like expression checking is bypassed by introducing double quote characters in …
-
Unscored —
MapServer before 7.0.8, 7.1.x and 7.2.x before 7.2.3, 7.3.x and 7.4.x before 7.4.5, and 7.5.x and 7.6.x before 7.6.3 do…