Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2020-15232

XML External Entity attack in mapfish-print

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

In mapfish-print before version 3.24, a user can do to an XML External Entity (XXE) attack with the provided SDL style.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

mapfish mapfish-print

  • < 3.24affected

References