CVE-2024-41117 | opengeos streamlit-geospatial 126/up to 115 10_ eval vis_params input validation (GHSL-2024-100)

A vulnerability was found in opengeos streamlit-geospatial up to 115/126. It has been classified as very critical. This affects the function eval of the file pages/10_????_Earth_Engine_Datasets.py. The manipulation of the argument vis_params leads to improper input validation.

This vulnerability is uniquely identified as CVE-2024-41117. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to apply a patch to fix this issue.