GHSA-w534-q4xf-h5v2LowCVSS 9.3

XSS in Mapfish Print relating to JSONP support

Published
July 7, 2020
Last Modified
January 9, 2023

🔗 CVE IDs covered (1)

CVE-2020-15231 →

📋 Description

Impact

A user can use the JSONP support to do a Cross-site scripting.

Patches

Use version >= 3.24

Workarounds

No

References

  • https://github.com/mapfish/mapfish-print/pull/1397/commits/89155f2506b9cee822e15ce60ccae390a1419d5e
  • https://cwe.mitre.org/data/definitions/79.html

For more information

If you have any questions or comments about this advisory Comment the pull request: https://github.com/mapfish/mapfish-print/pull/1397

🎯 Affected products3

  • maven/org.mapfish.print:print-lib:< 3.24
  • maven/org.mapfish.print:print-servlet:< 3.24
  • maven/org.mapfish.print:print-standalone:< 3.24

🔗 References (4)