Advisory Package Curation

MapProxy vulnerable to cross-site scripting in demo service MapProxy version 1.11.1 and older are vulnerable to cross-site scripting in the demo service resulting in possible information disclosure. An incomplete fix was released in v1.10.4 https://github.com/mapproxy/mapproxy/issues/322#issuecomment-518573169, and a complete fix was released in v1.11.1 https://github.com/mapproxy/mapproxy/commit/436c8f489761d1b4ee22b2440b53cc96bbc28aea.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') MapProxy version 1.10.3 and older is vulnerable to a Cross Site Scripting attack in the demo service resulting in possible information disclosure.

MapProxy vulnerable to cross-site scripting in demo service MapProxy version 1.11.1 and older are vulnerable to cross-site scripting in the demo service resulting in possible information disclosure. An incomplete fix was released in v1.10.4 https://github.com/mapproxy/mapproxy/issues/322#issuecomment-518573169, and a complete fix was released in v1.11.1 https://github.com/mapproxy/mapproxy/commit/436c8f489761d1b4ee22b2440b53cc96bbc28aea.

MapProxy vulnerable to cross-site scripting in demo service MapProxy version 1.11.1 and older are vulnerable to cross-site scripting in the demo service resulting in possible information disclosure. An incomplete fix was released in v1.10.4 https://github.com/mapproxy/mapproxy/issues/322#issuecomment-518573169, and a complete fix was released in v1.11.1 https://github.com/mapproxy/mapproxy/commit/436c8f489761d1b4ee22b2440b53cc96bbc28aea.