CVE-2026-44672

mapfish-print is a component of MapFish for printing templated cartographic maps. From 3.23.0 to before 3.28.28, 3.30.30, 3.31.22, 3.33.14, and 4.0.3, the attacker can execute arbitrary code in Dynamic table without being authenticated. This vulnerability is fixed in 3.28.28, 3.30.30, 3.31.22, 3.33.14, and 4.0.3.

CVSS

No CVSS.

References

Link	Resource
https://github.com/mapfish/mapfish-print/security/advisories/GHSA-q7m6-wpvf-mvwx

Configurations

No configuration.

History

No history.

Information

Published : 2026-05-28 16:16

Updated : 2026-06-17 10:51

NVD link : CVE-2026-44672

Mitre link : CVE-2026-44672

CVE.ORG link : CVE-2026-44672

JSON object : View

Products Affected

No product.

CWE

CWE-94

Improper Control of Generation of Code ('Code Injection')

{"id": "CVE-2026-44672", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-44672", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-05-28T15:25:47.863126Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "mapfish", "product": "mapfish-print", "versions": [{"status": "affected", "version": ">= 3.23.0, < 3.28.28"}, {"status": "affected", "version": ">= 3.29.0, < 3.30.30"}, {"status": "affected", "version": ">= 3.31.0, < 3.31.21"}, {"status": "affected", "version": ">= 3.32.0, < 3.33.14"}, {"status": "affected", "version": ">= 3.34.0, < 4.0.3"}]}, {"vendor": "camptocamp", "product": "mapfish_print", "versions": [{"status": "affected", "version": ">= 3.23.0, < 3.28.28"}, {"status": "affected", "version": ">= 3.29.0, < 3.30.30"}, {"status": "affected", "version": ">= 3.31.0, < 3.31.21"}, {"status": "affected", "version": ">= 3.32.0, < 3.33.14"}, {"status": "affected", "version": ">= 3.34.0, < 4.0.3"}]}, {"vendor": "org.mapfish", "product": "print.print-lib", "versions": [{"status": "affected", "version": ">= 3.23.0, < 3.28.28"}, {"status": "affected", "version": ">= 3.29.0, < 3.30.30"}, {"status": "affected", "version": ">= 3.31.0, < 3.31.21"}, {"status": "affected", "version": ">= 3.32.0, < 3.33.14"}, {"status": "affected", "version": ">= 3.34.0, < 4.0.3"}]}, {"vendor": "org.mapfish", "product": "print.print-servlet", "versions": [{"status": "affected", "version": ">= 3.23.0, < 3.28.28"}, {"status": "affected", "version": ">= 3.29.0, < 3.30.30"}, {"status": "affected", "version": ">= 3.31.0, < 3.31.21"}, {"status": "affected", "version": ">= 3.32.0, < 3.33.14"}, {"status": "affected", "version": ">= 3.34.0, < 4.0.3"}]}]}], "published": "2026-05-28T16:16:24.843", "references": [{"url": "https://github.com/mapfish/mapfish-print/security/advisories/GHSA-q7m6-wpvf-mvwx", "source": "security-advisories@github.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-94"}]}], "descriptions": [{"lang": "en", "value": "mapfish-print is a component of MapFish for printing templated cartographic maps. From 3.23.0 to before 3.28.28, 3.30.30, 3.31.22, 3.33.14, and 4.0.3, the attacker can execute arbitrary code in Dynamic table without being authenticated. This vulnerability is fixed in 3.28.28, 3.30.30, 3.31.22, 3.33.14, and 4.0.3."}], "lastModified": "2026-06-17T10:51:13.500", "sourceIdentifier": "security-advisories@github.com"}

CVE-2026-44672

JSON object

Attach tags to CVE-2026-44672

Attach tags to `CVE-2026-44672`