MapServer prior to 7.0.8, 7.1.x and 7.2.x prior to 7.2.3, 7.3.x and 7.4.x prior to 7.4.5, and 7.5.x and 7.6.x prior to 7.6.3 does not properly enforce the MS_MAP_NO_PATH and MS_MAP_PATTERN restrictions that are intended to control the locations from which a mapfile may be loaded (with MapServer CGI).
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
osgeo mapserver |
||
fedoraproject fedora 33 |
||
fedoraproject fedora 34 |
Vulmon