Vulnerabilities

TI-2026-40310 CVE-2026-55848 · GHSA-5v29-34h8-v68r

mapfish-print: XXE on MapFish Print allows reading arbitrary files of certain types

HIGH 76

mapfish-print is a component of MapFish for printing templated cartographic maps.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00531 Published 2026-08-28 Fixed in 3.28.30, 3.30.32 +3 CWE-611

TI-2026-32572 CVE-2026-44672 · GHSA-q7m6-wpvf-mvwx

MEDIUM 48

mapfish-print is a component of MapFish for printing templated cartographic maps.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00325 Published 2026-05-28 Fixed in 3.28.28, 3.30.30 +3 CWE-94

TI-2020-12004 CVE-2020-15232 · GHSA-vjv6-gq77-3mjw

MEDIUM 43

In mapfish-print before version 3.24, a user can do to an XML External Entity (XXE) attack with the provided SDL style.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.01342 Published 2020-10-02 Fixed in 3.24 CWE-611

TI-2020-12003 CVE-2020-15231 · GHSA-w534-q4xf-h5v2

MEDIUM 41

In mapfish-print before version 3.24, a user can use the JSONP support to do a Cross-site scripting.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00801 Published 2020-10-02 Fixed in 3.24 CWE-79