This page aggregates publicly disclosed CVE and security risk information related to mapfish, with CVSS, EPSS, publication dates, and vulnerability intelligence data to help assess potential risk and remediation priority.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2020-15232 | In mapfish-print before version 3.24, a user can do to an XML External Entity (XXE) attack with the provided SDL style. | [email protected] | 9.3 | 1.33% | 2020-10-02 | 2026-06-16 |
| CVE-2020-15231 | In mapfish-print before version 3.24, a user can use the JSONP support to do a Cross-site scripting. | [email protected] | 9.3 | 0.79% | 2020-10-02 | 2026-06-16 |