Skip to content
OpenAdvisories
Critical · 9.3 CVE-2020-15231 EUVD-2020-0574GHSA-w534-q4xf-h5v2

Cross-site scripting attack in mapfish-print

Published Oct 2, 2020 · Updated Aug 4, 2024 · Assigned by GitHub_M

Vendor: mapfish Product: mapfish-print Package: org.mapfish.print:print-lib Package: org.mapfish.print:print-servlet Package: org.mapfish.print:print-standalone Ecosystem: Maven

Description

In mapfish-print before version 3.24, a user can use the JSONP support to do a Cross-site scripting.

Affected products

VendorProductAffectedFixed
mapfish mapfish-print < 3.24 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.mapfish.print:print-lib < 3.24 3.24 GHSA-w534-q4xf-h5v2
Maven org.mapfish.print:print-servlet < 3.24 3.24 GHSA-w534-q4xf-h5v2
Maven org.mapfish.print:print-standalone < 3.24 3.24 GHSA-w534-q4xf-h5v2

References