CVE-2024-35627: Tileserver Tileservergl

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

tileserver-gl up to v4.4.10 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /data/v3/?key.

Affected products

• Tileserver Tileservergl: before 4.4.10 (fixed in 4.4.10)

Published 2024-05-22. Last modified 2026-06-17.