CVE-2017-1000042

Published: Jul 17, 2017Modified: May 13, 2026

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

Mapbox.js versions 1.x prior to 1.6.5 and 2.x prior to 2.1.7 are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via TileJSON Name.

Affected (33)

Products: Mapbox Project: Mapbox

Mapbox Project

1 product

Mapbox

Configuration A

33 vulnerable

Vulnerable Software	Affected Versions
Mapbox Project Mapbox	Version 1.0.0
Mapbox Project Mapbox	Version 1.0.1
Mapbox Project Mapbox	Version 1.0.2
Mapbox Project Mapbox	Version 1.0.3
Mapbox Project Mapbox	Version 1.0.4
Mapbox Project Mapbox	Version 1.1.0
Mapbox Project Mapbox	Version 1.2.0
Mapbox Project Mapbox	Version 1.3.0
Mapbox Project Mapbox	Version 1.3.1
Mapbox Project Mapbox	Version 1.4.0
Mapbox Project Mapbox	Version 1.4.1
Mapbox Project Mapbox	Version 1.4.2
Mapbox Project Mapbox	Version 1.5.0
Mapbox Project Mapbox	Version 1.5.1
Mapbox Project Mapbox	Version 1.5.2
Mapbox Project Mapbox	Version 1.6.0
Mapbox Project Mapbox	Version 1.6.0 beta0
Mapbox Project Mapbox	Version 1.6.0 beta
Mapbox Project Mapbox	Version 1.6.1
Mapbox Project Mapbox	Version 1.6.2
Mapbox Project Mapbox	Version 1.6.2 beta0
Mapbox Project Mapbox	Version 1.6.4
Mapbox Project Mapbox	Version 2.0.0
Mapbox Project Mapbox	Version 2.0.0 beta0
Mapbox Project Mapbox	Version 2.0.0 beta1
Mapbox Project Mapbox	Version 2.0.1
Mapbox Project Mapbox	Version 2.1.0
Mapbox Project Mapbox	Version 2.1.1
Mapbox Project Mapbox	Version 2.1.2
Mapbox Project Mapbox	Version 2.1.3
Mapbox Project Mapbox	Version 2.1.4
Mapbox Project Mapbox	Version 2.1.5
Mapbox Project Mapbox	Version 2.1.6