XSS in Openseamap Online Chart
CVE-2015-10074
A vulnerability was found in OpenSeaMap online_chart 1.2. It has been classified as problematic. Affected is the function init of the file index.php. The manipulation of the argument mtext leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version staging is able to address this issue. The patch is identified as 8649157158f921590d650e2d2f4bdf0df1017e9d. It is recommended to upgrade the affected component. VDB-220218 is the identifier assigned to this vulnerability.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.005 (40.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 3.5 (Low). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N.
Affected products
- Openseamap Online_chart — versions 1.2
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cna@vuldb.com (technical-description, Third Party Advisory, vdb-entry)
- cna@vuldb.com (signature, Permissions Required, permissions-required)
- cna@vuldb.com (issue-tracking, Patch)
- cna@vuldb.com (Patch, patch)
- cna@vuldb.com (Patch, patch)
Frequently asked questions
- What is CVE-2015-10074?
- CVE-2015-10074 is a low-severity vulnerability in Openseamap Online Chart, classified under Cross-site Scripting. CVSS score: 3.5/10. Published 2023-02-07.
- How severe is CVE-2015-10074?
- Low severity. CVSS v3 base score is 3.5 out of 10.
- Is CVE-2015-10074 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.