Em resumo
- CVE-2026-44672 é uma vulnerabilidade CRÍTICO (CVSS 9.3) que afeta org.mapfish.print:print-lib, org.mapfish.print:print-servlet.
- Chance de exploração nos próximos 30 dias (EPSS): 0.33%, maior que 25.6% das vulnerabilidades.
- Correção: atualize para 3.28.28, 3.30.30, 3.31.21, 3.33.14 ou posterior.
| Package | Affected versions | Patched versions |
|---|
| org.mapfish.print:print-lib Maven | ≥ 3.23.0, < 3.28.28≥ 3.29.0, < 3.30.30≥ 3.31.0, < 3.31.21≥ 3.32.0, < 3.33.14≥ 3.34.0, < 4.0.3
| 3.28.283.30.303.31.213.33.144.0.3
|
| org.mapfish.print:print-servlet Maven | ≥ 3.23.0, < 3.28.28≥ 3.29.0, < 3.30.30≥ 3.31.0, < 3.31.21≥ 3.32.0, < 3.33.14≥ 3.34.0, < 4.0.3
| 3.28.283.30.303.31.213.33.144.0.3
|
Description
Impact
The attacker can execute arbitrary code without being authenticated
Mitigation
Upgrade to a patched version (please check affected/patched version matrix)
Credits
Bug Bounty of Canton du Jura
NVD description
mapfish-print is a component of MapFish for printing templated cartographic maps. From 3.23.0 to before 3.28.28, 3.30.30, 3.31.22, 3.33.14, and 4.0.3, the attacker can execute arbitrary code in Dynamic table without being authenticated. This vulnerability is fixed in 3.28.28, 3.30.30, 3.31.22, 3.33.14, and 4.0.3.
Mais vulnerabilidades de org.mapfish.print:print-lib
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free