Mapfish Print

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:mapfish:mapfish-print:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMapfish (3de94544-5880-5590-ae4e-a7cd534e3a13)
ProductMapfish Print (46a2b6c7-1266-5e3b-83bd-ce75e9e2f105)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-44672 vulnerable 2026-06-08 08:05:11.254706 mapfish-print: Remote Code Injection (RCE) in Dynamic table
mapfish-print is a component of MapFish for printing templated cartographic maps. From 3.23.0 to before 3.28.28, 3.30.30, 3.31.22, 3.33.14, and 4.0.3, the attacker can execute arbitrary code in Dynamic table without being authenticated. This vulnerability is fixed in 3.28.28, 3.30.30, 3.31.22, 3.33.14, and 4.0.3.
Published: 2026-05-28T14:35:29.378Z
Updated: 2026-05-28T15:26:01.990Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15232 vulnerable 2026-06-08 05:19:25.556413 XML External Entity attack in mapfish-print
CRITICAL (9.3)
In mapfish-print before version 3.24, a user can do to an XML External Entity (XXE) attack with the provided SDL style.
Published: 2020-10-02T19:45:15.000Z
Updated: 2024-08-04T13:08:22.897Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15231 vulnerable 2026-06-08 05:19:25.555319 Cross-site scripting attack in mapfish-print
CRITICAL (9.3)
In mapfish-print before version 3.24, a user can use the JSONP support to do a Cross-site scripting.
Published: 2020-10-02T19:40:14.000Z
Updated: 2024-08-04T13:08:23.265Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.