CVEvulnerability
CVE-2014-2233
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-12-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Description
Server-side request forgery (SSRF) vulnerability in the MapAPI in Infoware MapSuite before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to trigger requests to intranet servers via unspecified vectors.
Affected configurations
• infoware mapsuite 1.0.35
• infoware mapsuite 1.1.48
References
- http://iw.mapandroute.de/MapAPI-1.0/releaseHistory.jsp Vendor Advisory
- http://iw.mapandroute.de/MapAPI-1.1/releaseHistory.jsp Vendor Advisory
- http://www.christian-schneider.net/advisories/CVE-2014-2233.txt www.christian-schneider.net
- http://iw.mapandroute.de/MapAPI-1.0/releaseHistory.jsp Vendor Advisory
- http://iw.mapandroute.de/MapAPI-1.1/releaseHistory.jsp Vendor Advisory
- http://www.christian-schneider.net/advisories/CVE-2014-2233.txt www.christian-schneider.net