Maptiler Tileserver PHP
2 CVEs affecting Maptiler Tileserver PHP. Latest disclosed: 2025-07-29. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-44136 | Critical | 9.8 | 2025-07-29 | MapTiler Tileserver-php v2.0 is vulnerable to Cross Site Scripting (XSS). The GET parameter "layer" is reflected in an error message without html encoding. Thi… |
CVE-2025-44137 | High | 8.2 | 2025-07-29 | MapTiler Tileserver-php v2.0 is vulnerable to Directory Traversal. The renderTile function within tileserver.php is responsible for delivering tiles that are s… |