.. / CVE-2020-15500

• XSS
• Nuclei
• Web

Exploit for TileServer GL <=3.0.0 - Cross-Site Scripting (CVE-2020-15500)

Description:

TileServer GL through 3.0.0 is vulnerable to reflected cross-site scripting via server.js because the content of the key GET parameter is reflected unsanitized in an HTTP response for the application’s main page.

Nuclei Template

View the template here CVE-2020-15500.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2020/CVE-2020-15500.yaml

References: