CyberRota Analysis
AI-GeneratedA stored cross-site scripting vulnerability in the Geomap panel's MapLibre base layer affects Java applications, allowing users with Editor roles to inject malicious JavaScript into another user's session through a compromised style configuration. This can lead to unauthorized escalation of privileges to Org Admin. Organizations utilizing this Java component, particularly those with user roles that can edit configurations, should prioritize patching this vulnerability to mitigate potential security risks.
Original NVD Description
A stored cross-site scripting vulnerability in the Geomap panel's MapLibre base layer allows a user with the Editor role to execute arbitrary JavaScript in another user's session by hosting a malicious style configuration, enabling escalation to Org Admin.