← Database

CVE-2026-27818

HIGH CVSS: 7.5 Published: 2026-02-26 Modified: 2026-06-17

Description

TerriaJS-Server is a NodeJS Express server for TerriaJS, a library for building web-based geospatial data explorers. A validation bug in versions prior to 4.0.3 allows an attacker to proxy domains not explicitly allowed in the `proxyableDomains` configuration. Version 4.0.3 fixes the issue.

Affected Platforms

Terria Terriajs-Server

Weakness Type

CWE-20, CWE-918

References