{"id":59872,"date":"2025-08-04T12:50:53","date_gmt":"2025-08-04T12:50:53","guid":{"rendered":""},"modified":"2025-10-21T03:36:19","modified_gmt":"2025-10-21T09:36:19","slug":"cve-2025-44136-critical-cross-site-scripting-vulnerability-in-maptiler-tileserver-php-v2-0","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-44136-critical-cross-site-scripting-vulnerability-in-maptiler-tileserver-php-v2-0\/","title":{"rendered":"CVE-2025-44136: Critical Cross Site Scripting Vulnerability in MapTiler Tileserver-php v2.0<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

Cybersecurity is a field that is constantly evolving with new vulnerabilities being discovered on a daily basis. One such vulnerability is the CVE-2025-44136, a high-risk Cross Site Scripting (XSS) vulnerability found in MapTiler Tileserver-php v2.0. This vulnerability can have severe implications including potential system<\/a> compromise and data leakage. Considering the critical role that MapTiler Tileserver plays in various applications<\/a>, it is important to understand the nature of this vulnerability and the steps that can be taken to mitigate it.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-44136
\nSeverity: Critical with a CVSS score of 9.8
\nAttack Vector: Cross Site Scripting<\/a> (XSS) via GET parameter
\nPrivileges Required: None
\nUser Interaction: Required
\nImpact: System compromise and potential<\/a> data leakage<\/p>\n

Affected Products<\/strong><\/p>\n

Product | Affected Versions<\/p>\n

MapTiler Tileserver-php | v2.0<\/p>\n

How the Exploit Works<\/strong><\/p>\n

The vulnerability lies in the GET parameter “layer” of MapTiler Tileserver-php<\/a> v2.0. This parameter is reflected in an error message without HTML encoding, making it vulnerable to Cross Site Scripting<\/a> (XSS) attacks. Essentially, an unauthenticated attacker can manipulate the “layer” GET parameter to inject malicious JavaScript or HTML code<\/a>. When a victim views the error message, the malicious code executes<\/a>, potentially leading to system compromise or data leakage.<\/p>\n

Conceptual Example Code<\/strong><\/p>\n

Below is a conceptual example of how the vulnerability might be exploited using an HTTP GET request<\/a>:<\/p>\n

GET \/tileserver.php?layer= HTTP\/1.1\nHost: vulnerable.example.com<\/code><\/pre>\n
In this example, the malicious payload is an HTML image tag with a JavaScript ‘onerror’ event handler. When the image fails to load, which it does because ‘x’ is not a valid source, the JavaScript code within the ‘onerror’ event handler (alert(‘XSS’)) is executed.<\/p>\n
Mitigation Guidance<\/strong><\/p>\n
Users of MapTiler Tileserver-php v2.0 are advised to apply the vendor patch as soon as it becomes available. In the meantime, use of Web Application Firewalls (WAFs) or Intrusion Detection Systems (IDS) can serve as a temporary mitigation. These systems can be configured to detect and block attempts to exploit this vulnerability by looking for known malicious patterns in HTTP requests<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"
Overview Cybersecurity is a field that is constantly evolving with new vulnerabilities being discovered on a daily basis. One such vulnerability is the CVE-2025-44136, a high-risk Cross Site Scripting (XSS) vulnerability found in MapTiler Tileserver-php v2.0. This vulnerability can have severe implications including potential system compromise and data leakage. Considering the critical role that MapTiler […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[1],"tags":[],"vendor":[],"product":[],"attack_vector":[81],"asset_type":[],"severity":[],"exploit_status":[],"class_list":["post-59872","post","type-post","status-publish","format-standard","hentry","category-uncategorized","attack_vector-xss"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t