Mapbox

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Mapbox records in CISA KEV

No Mapbox vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mapbox.js 1 record LOW Maps Software Development Kit 1 record LOW Npm-test-sqlite3-trunk 1 record LOW

Records

1 record in Mapbox.js · all components

TI-2017-14386 CVE-2017-1000043 · GHSA-q69p-5h74-w36f

Mapbox.js versions 1.x prior to 1.6.6 and 2.x prior to 2.2.4 are vulnerable to a…

LOW 29

Mapbox.js versions 1.x prior to 1.6.6 and 2.x prior to 2.2.4 are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via TileJSON name and map share control

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00935 Published 2017-07-13 Fixed in 1.6.6, 2.2.4 CWE-79

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0