mapster — Vulnerabilities & Security Advisories 3

Mapster is a geospatial mapping platform primarily used for data visualization and location-based services analysis. Historically, it has been susceptible to remote code execution vulnerabilities due to unsafe deserialization of user-provided data, cross-site scripting flaws from improper input sanitization in map rendering features, and privilege escalation through insecure direct object references in API endpoints. The platform has experienced notable security incidents including a 2022 breach where an unauthenticated RCE vulnerability allowed attackers to execute arbitrary commands on the underlying server, resulting in data exfiltration from customer mapping projects.