Skip to content
OpenAdvisories

Vendor

HyperView

2 known vulnerabilities.

Products

Geoportal Toolkit 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-6450

    Reflected XSS in HyperView Geoportal Toolkit

    HyperView Geoportal Toolkit in versions lower than 8.5.0 is vulnerable to Reflected Cross-Site Scripting (XSS). An unauthenticated attacker might trick somebody into using a crafted URL, which will cause a script to be run in user's browser.

    HyperView Geoportal Toolkit
  • Medium 5.3
    CVE-2024-6449

    Arbitrary cross-domain file inclusion in HyperView Geoportal Toolkit

    HyperView Geoportal Toolkit in versions lower than 8.5.0 does not restrict cross-domain requests when fetching remote content pointed by one of GET request parameters. An unauthenticated remote attacker can prepare links, which upon opening will load scripts …

    HyperView Geoportal Toolkit