In mapfish-print before version 3.24, a user can use the JSONP support to do a Cross-site scripting.
CVSS Score
9.3
EPSS Score
0.003
Published
2020-10-02
In mapfish-print before version 3.24, a user can do to an XML External Entity (XXE) attack with the provided SDL style.
CVSS Score
9.3
EPSS Score
0.003
Published
2020-10-02