Vendor

mapfish

4 known vulnerabilities.

Products

mapfish-print 4 org.mapfish.print.print-lib 1 org.mapfish.print.print-servlet 1

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Critical 9.3

CVE-2026-44672

mapfish-print: Remote Code Injection (RCE) in Dynamic table

mapfish-print is a component of MapFish for printing templated cartographic maps. From 3.23.0 to before 3.28.28, 3.30.30, 3.31.22, 3.33.14, and 4.0.3, the attacker can execute arbitrary code in Dynamic table without being authenticated. This vulnerability is …

mapfish camptocamp org.mapfish mapfish-print Maven

May 28, 2026
Critical 9.3

CVE-2020-15232

XML External Entity attack in mapfish-print

In mapfish-print before version 3.24, a user can do to an XML External Entity (XXE) attack with the provided SDL style.

mapfish mapfish-print org.mapfish.print:print-servlet org.mapfish.print:print-lib Maven

Oct 2, 2020
Critical 9.3

CVE-2020-15231

Cross-site scripting attack in mapfish-print

In mapfish-print before version 3.24, a user can use the JSONP support to do a Cross-site scripting.

mapfish mapfish-print org.mapfish.print:print-servlet org.mapfish.print:print-lib Maven

Oct 2, 2020