Logo
Retour à la veille

CVE-2026-104140

Publié : 12 octobre 2026
Modifié : 12 octobre 2026
Lien officiel NVD
Score CVSS
6.1
MEDIUM

Description détaillée

QGIS is a free, open source, cross-platform geographic information system. Prior to 3.44.12 and 4.0.0 through 4.2.3, QGIS Server renders feature data in WFS3 (OGC API Features) HTML responses without HTML escaping. Attacker-controlled feature.properties values from a published writable vector layer reach resources/server/api/ogc/templates/wfs3/getFeatures.html through QgsServerOgcApiHandler::htmlDump and the if_nullptr_null_str callback. A user who opens an items HTML page can execute stored markup or script in the QGIS Server origin, which can expose the viewer's session data or issue authenticated requests with the viewer's privileges. This issue is fixed in version 3.44.12.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Références et Patchs

https://github.com/qgis/QGIS/commit/1930e81c918818a4f5412219f8f7e470d2709f91https://github.com/qgis/QGIS/commit/ca76fcac616dbf1c0446514fd6517296eb7c6904https://github.com/qgis/QGIS/pull/66616https://github.com/qgis/QGIS/pull/67044https://github.com/qgis/QGIS/releases/tag/final-3_44_12https://github.com/qgis/QGIS/security/advisories/GHSA-cr49-pm9v-m788

Dernières Vulnérabilités

CVE-2026-93892

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.

VOIR DÉTAILS

CVE-2026-93891

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.

VOIR DÉTAILS

CVE-2026-92832

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.

VOIR DÉTAILS