CVE-2014-2233 Server-side request forgery (SSRF) vulnerability in the MapAPI in Infoware MapSuite before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to trigger requests to intranet servers via unspecifie...
MediumCVSS 5.0
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Server-side request forgery (SSRF) vulnerability in the MapAPI in Infoware MapSuite before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to trigger requests to intranet servers via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| infoware mapsuite | = 1.0.35 | No fix listed |
| infoware mapsuite | = 1.1.48 | No fix listed |
References
- iw.mapandroute.de vendor-advisory
- iw.mapandroute.de vendor-advisory
- www.christian-schneider.net