← Back

Mapfish

mapfish

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Print
print
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-15232
1Mapfish
1Print
Nov 21, 2024
Oct 2, 2020
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
In mapfish-print before version 3.24, a user can do to an XML External Entity (XXE) attack with the provided SDL style.
CVE-2020-15231
1Mapfish
1Print
Nov 21, 2024
Oct 2, 2020
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
In mapfish-print before version 3.24, a user can use the JSONP support to do a Cross-site scripting.