Lucene search
GoogleOSV:GHSA-VJV6-GQ77-3MJWHistoryJul 07, 2020 - 4:32 p.m.
XXE attack in Mapfish Print
2020-07-0716:32:45
Google
osv.dev
15
EPSS
0.002
Percentile
61.8%
Impact
A user can do to an XML External Entity (XXE) attack with the provided SDL style.
Patches
Use version >= 3.24
Workarounds
No
References
- https://cwe.mitre.org/data/definitions/611.html
- https://github.com/mapfish/mapfish-print/pull/1397/commits/e1d0527d13db06b2b62ca7d6afb9e97dacd67a0e
For more information
If you have any questions or comments about this advisory Comment the pull request: https://github.com/mapfish/mapfish-print/pull/1397
Related
github
github
XXE attack in Mapfish Print
2020-07-07 16:32:45
cvelist
cvelist
CVE-2020-15232 XML External Entity attack in mapfish-print
2020-10-02 19:45:15
prion
prion
Xxe
2020-10-02 20:15:00
veracode
veracode
XML External Entity (XXE) Injection
2020-10-05 02:27:05
cve
cve
CVE-2020-15232
2020-10-02 20:15:12
osv
osv
CVE-2020-15232
2020-10-02 20:15:00
nvd
nvd
CVE-2020-15232
2020-10-02 20:15:12