XSS in Mapfish Print relating to JSONP support

GHSA-w534-q4xf-h5v2 · CVE-2020-15231

Published Jul 7, 2020 · Modified Jul 8, 2026

Description

A user can use the JSONP support to do a Cross-site scripting.

Use version >= 3.24

If you have any questions or comments about this advisory Comment the pull request: https://github.com/mapfish/mapfish-print/pull/1397

9.3 / 10

CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

Fix 3.24

Introduced 0

55 affected versions

1.2.02.0.02.1.02.1.12.1.22.1.32.1.42.1.53.03.1.03.1.13.1.23.10.03.10.13.10.23.10.33.10.43.10.53.10.63.10.7 +35 more

Fix 3.24

Introduced 0

55 affected versions

1.2.02.0.02.1.02.1.12.1.22.1.32.1.42.1.53.03.1.03.1.13.1.23.10.03.10.13.10.23.10.33.10.43.10.53.10.63.10.7 +35 more

Fix 3.24

Introduced 0

17 affected versions

1.2.02.0.02.1.02.1.12.1.22.1.32.1.42.1.53.18.33.18.43.19.03.20.03.20.13.20.23.20.33.21.03.22.0

Ready to move

Free, no credit card | First findings in minutes