| Package | Affected versions | Patched versions |
|---|---|---|
| org.mapfish.print:print-lib | < 3.24 | 3.24 |
| org.mapfish.print:print-servlet | < 3.24 | 3.24 |
| org.mapfish.print:print-standalone | < 3.24 | 3.24 |
< 3.24 | 3.24 |
A user can use the JSONP support to do a Cross-site scripting.
Use version >= 3.24
No
If you have any questions or comments about this advisory Comment the pull request: https://github.com/mapfish/mapfish-print/pull/1397
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free