CVE-2014-2233

Published: Dec 1, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Server-side request forgery (SSRF) vulnerability in the MapAPI in Infoware MapSuite before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to trigger requests to intranet servers via unspecified vectors.

Affected (2)

Products: Infoware: Mapsuite

Infoware

1 product

Mapsuite

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Infoware Mapsuite	Version 1.0.35
Infoware Mapsuite	Version 1.1.48

References (6)

http://iw.mapandroute.de/MapAPI-1.0/releaseHistory.jsp

Source: cve@mitre.org

Vendor Advisory

http://iw.mapandroute.de/MapAPI-1.1/releaseHistory.jsp

Source: cve@mitre.org

Vendor Advisory

http://www.christian-schneider.net/advisories/CVE-2014-2233.txt

Source: cve@mitre.org

http://iw.mapandroute.de/MapAPI-1.0/releaseHistory.jsp

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://iw.mapandroute.de/MapAPI-1.1/releaseHistory.jsp

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.christian-schneider.net/advisories/CVE-2014-2233.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.