org.mapfish.print:print-servlet

4 results · Feed

• High 8.6
  CVE-2026-55848

  mapfish-print: XXE on MapFish Print allows reading arbitrary files of certain types

  mapfish-print is a component of MapFish for printing templated cartographic maps. Prior to 3.28.30, 3.30.32, 3.31.24, 3.33.16, and 4.0.5, MapFish Print accepts an attacker-controlled GML layer url in requests to the /api/print3/print endpoint and fetches XML …

  mapfish mapfish-print org.mapfish.print.print-servlet org.mapfish.print.print-lib Maven
  Aug 28, 2026
• Critical 9.3
  CVE-2026-44672

  mapfish-print: Remote Code Injection (RCE) in Dynamic table

  mapfish-print is a component of MapFish for printing templated cartographic maps. From 3.23.0 to before 3.28.28, 3.30.30, 3.31.22, 3.33.14, and 4.0.3, the attacker can execute arbitrary code in Dynamic table without being authenticated. This vulnerability is …

  mapfish camptocamp org.mapfish mapfish-print Maven
  May 28, 2026
• Critical 9.3
  CVE-2020-15232

  XML External Entity attack in mapfish-print

  In mapfish-print before version 3.24, a user can do to an XML External Entity (XXE) attack with the provided SDL style.

  mapfish mapfish-print org.mapfish.print:print-servlet org.mapfish.print:print-lib Maven
  Oct 2, 2020
• Critical 9.3
  CVE-2020-15231

  Cross-site scripting attack in mapfish-print

  In mapfish-print before version 3.24, a user can use the JSONP support to do a Cross-site scripting.

  mapfish mapfish-print org.mapfish.print:print-lib org.mapfish.print:print-servlet Maven
  Oct 2, 2020