Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-6450 EUVD-2024-48008GHSA-9c47-7pjp-gr57

Reflected XSS in HyperView Geoportal Toolkit

Published Aug 28, 2024 · Updated Jan 9, 2025 · Assigned by CERT-PL

Description

HyperView Geoportal Toolkit in versions lower than 8.5.0 is vulnerable to Reflected Cross-Site Scripting (XSS). An unauthenticated attacker might trick somebody into using a crafted URL, which will cause a script to be run in user's browser.

Affected products

VendorProductAffectedFixed
HyperView Geoportal Toolkit < 8.5.0 8.5.0

References