XSS in Mapfish Print relating to JSONP support · CVE-2020-15231 · GitHub Advisory Database · GitHub

XSS in Mapfish Print relating to JSONP support

Low severity GitHub Reviewed Published Jul 6, 2020 in mapfish/mapfish-print • Updated Jan 9, 2023

Package

org.mapfish.print:print-lib (Maven)

Affected versions

< 3.24

Patched versions

3.24

org.mapfish.print:print-servlet (Maven)

< 3.24

3.24

org.mapfish.print:print-standalone (Maven)

< 3.24

3.24

Description

Impact

A user can use the JSONP support to do a Cross-site scripting.

Patches

Use version >= 3.24

Workarounds

No

References

For more information

If you have any questions or comments about this advisory Comment the pull request: mapfish/mapfish-print#1397

References

sbrunner published to mapfish/mapfish-print

Jul 6, 2020

Reviewed Jul 7, 2020

Published to the GitHub Advisory Database Jul 7, 2020

Last updated Jan 9, 2023