Print

CVEs (4)

• CVE-2020-15232CriOct 2, 2020
  Mapfish

  Print
  risk 0.61cvss 9.3epss 0.01

  In mapfish-print before version 3.24, a user can do to an XML External Entity (XXE) attack with the provided SDL style.

• CVE-2020-15231CriOct 2, 2020
  Mapfish

  Print
  risk 0.61cvss 9.3epss 0.01

  In mapfish-print before version 3.24, a user can use the JSONP support to do a Cross-site scripting.

• CVE-2026-44672CriMay 28, 2026
  Mapfish

  Print
  risk 0.53cvss —epss 0.01

  mapfish-print is a component of MapFish for printing templated cartographic maps. From 3.23.0 to before 3.28.28, 3.30.30, 3.31.22, 3.33.14, and 4.0.3, the attacker can execute arbitrary code in Dynamic table without being authenticated. This vulnerability is fixed in 3.28.28,…

• CVE-2026-55848HigAug 28, 2026
  Mapfish

  Print
  risk 0.49cvss 8.6epss 0.01

  mapfish-print is a component of MapFish for printing templated cartographic maps. Prior to 3.28.30, 3.30.32, 3.31.24, 3.33.16, and 4.0.5, MapFish Print accepts an attacker-controlled GML layer url in requests to the /api/print3/print endpoint and fetches XML parsed by…