Server-side request forgery (SSRF) vulnerability in the MapAPI in Infoware MapSuite before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to trigger requests to intranet servers via unspecified vectors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mapsuite | Infoware | 1.0.35 (including) | 1.0.35 (including) |
| Mapsuite | Infoware | 1.1.48 (including) | 1.1.48 (including) |
References
- http://iw.mapandroute.de/MapAPI-1.0/releaseHistory.jsp
- http://iw.mapandroute.de/MapAPI-1.1/releaseHistory.jsp
- http://www.christian-schneider.net/advisories/CVE-2014-2233.txt
- http://iw.mapandroute.de/MapAPI-1.0/releaseHistory.jsp
- http://iw.mapandroute.de/MapAPI-1.1/releaseHistory.jsp
- http://www.christian-schneider.net/advisories/CVE-2014-2233.txt