In mapfish-print before version 3.24, a user can use the JSONP support to do a Cross-site scripting.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| org.mapfish.print:print-lib(Maven) | 0 | 3.24 | N/A |
| org.mapfish.print:print-servlet(Maven) | 0 | 3.24 | N/A |
| org.mapfish.print:print-standalone(Maven) | 0 | 3.24 | N/A |
CVSS Metrics