GHSA-vjv6-gq77-3mjwCriticalCVSS 9.3

XXE attack in Mapfish Print

Published
July 7, 2020
Last Modified
June 27, 2023

🔗 CVE IDs covered (1)

CVE-2020-15232 →

📋 Description

Impact

A user can do to an XML External Entity (XXE) attack with the provided SDL style.

Patches

Use version >= 3.24

Workarounds

No

References

  • https://cwe.mitre.org/data/definitions/611.html
  • https://github.com/mapfish/mapfish-print/pull/1397/commits/e1d0527d13db06b2b62ca7d6afb9e97dacd67a0e

For more information

If you have any questions or comments about this advisory Comment the pull request: https://github.com/mapfish/mapfish-print/pull/1397

🎯 Affected products3

  • maven/org.mapfish.print:print-lib:>= 3.0, < 3.24
  • maven/org.mapfish.print:print-servlet:>= 3.0, < 3.24
  • maven/org.mapfish.print:print-standalone:>= 3.0, < 3.24

🔗 References (5)