laptop and a wrench

漏洞

The 'InfoFormat' parameter containing an unacceptable value is returned when making a GetFeatureInfo request to the Web Map Service (WMS) when INFO_FORMAT is equal to application/geojson.

上次发布: June 10, 2022 ArcGIS GIS Server
漏洞 ID 编号 BUG-000144235
已提交November 3, 2021
上次修改时间June 5, 2024
适用范围ArcGIS GIS Server
找到的版本10.9
操作系统Windows OS
操作系统版本2019 64 Bit
状态Will Not Be Addressed

附加信息

In ArcGIS Enterprise 10.9 release, WMS is updated to support application/geo+json instead of application/geojson. Requests to GetFeatureInfo is updated to send URL encoded strings, for example, application/geo%2Bjson.

解决办法

There is a functioning workaround for this bug, tested in ArcGIS Enterprise 10.9.1. The workaround is demonstrated using the path information with further elaboration after the example request:

https://services.ga.gov.au/gis/services/OZTemp_Well_Data_Extract/MapServer/WMSServer?service=WMS&version=1.3.0&request=GetFeatureInfo&layers=Thermal_Well&styles&crs=EPSG%3A3857&bbox=15823927.178137133,-3219853.1348547763,15887784.921106925,-3188589.4481924823&width=960&height=470&query_layers=Thermal_Well&feature_count=20&info_format=application%2Fgeo%2Bjson&x=456&y=131

The problem with the last test, which formats the request with application/geojson, is that the request requires using the ACII code for the special characters, so the '/' is '%2F' and the '+' is '%2B' in order to allow the request to use the new formatting for ArcGIS Enterprise 10.9+.

重现步骤

漏洞 ID: BUG-000144235

软件:

  • ArcGIS GIS Server

当漏洞状态发生变化时获得通知

下载 Esri 支持应用程序

发现关于本主题的更多内容

获取来自 ArcGIS 专家的帮助

联系技术支持部门

下载 Esri 支持应用程序

转至下载选项