mapfish

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

mapfish records in CISA KEV

No mapfish vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records

TI-2026-40310 CVE-2026-55848 · GHSA-5v29-34h8-v68r

HIGH 76

mapfish-print is a component of MapFish for printing templated cartographic maps.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00531 Published 2026-08-28 Fixed in 3.28.30, 3.30.32 +3 CWE-611

TI-2026-32572 CVE-2026-44672 · GHSA-q7m6-wpvf-mvwx

MEDIUM 48

mapfish-print is a component of MapFish for printing templated cartographic maps.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00325 Published 2026-05-28 Fixed in 3.28.28, 3.30.30 +3 CWE-94

TI-2020-12004 CVE-2020-15232 · GHSA-vjv6-gq77-3mjw

MEDIUM 43

In mapfish-print before version 3.24, a user can do to an XML External Entity (XXE) attack with the provided SDL style.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.01342 Published 2020-10-02 Fixed in 3.24 CWE-611

TI-2020-12003 CVE-2020-15231 · GHSA-w534-q4xf-h5v2

MEDIUM 41

In mapfish-print before version 3.24, a user can use the JSONP support to do a Cross-site scripting.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00801 Published 2020-10-02 Fixed in 3.24 CWE-79