Critical severity9.8NVD Advisory· Published Sep 19, 2025· Updated Jun 17, 2026
CVE-2025-59431
CVE-2025-59431
Description
MapServer is a system for developing web-based GIS applications. Prior to 8.4.1, the XML Filter Query directive PropertyName is vulnerably to Boolean-based SQL injection. It seems like expression checking is bypassed by introducing double quote characters in the PropertyName. Allowing to manipulate backend database queries. This vulnerability is fixed in 8.4.1.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
1- github.com/MapServer/MapServer/security/advisories/GHSA-256m-rx4h-r55wnvdExploitVendor Advisory
News mentions
0No linked articles in our index yet.