CVE-2025-44137

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-44137

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-44137.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-44137

Published

2025-07-29T17:15:33.493Z

Modified

2026-04-10T05:27:10.123482Z

Severity

8.2 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N CVSS Calculator

Summary

[none]

Details

MapTiler Tileserver-php v2.0 is vulnerable to Directory Traversal. The renderTile function within tileserver.php is responsible for delivering tiles that are stored as files on the server via web request. Creating the path to a file allows the insertion of "../" and thus read any file on the web server. Affected GET parameters are "TileMatrix", "TileRow", "TileCol" and "Format"

References

Affected packages

Git / github.com/maptiler/tileserver-php

Affected ranges

Type

GIT

Repo

https://github.com/maptiler/tileserver-php

Events

Introduced

Last affected

e4148733ed1ae179e2c820c011ed47679b33b92e

Fixed

4fe14e6164bbe2a3f9e3b3d7acf303e3ec210c8e

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0"
        }
    ]
}

Affected versions

v0.*

v0.1

v1.*

v1.0

v2.*

v2.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-44137.json"