Search criteria

2 vulnerabilities by camptocamp

CVE-2026-44672 (GCVE-0-2026-44672)

Vulnerability from cvelistv5 – Published: 2026-05-28 14:35 – Updated: 2026-05-28 15:26
VLAI
Title
mapfish-print: Remote Code Injection (RCE) in Dynamic table
Summary
mapfish-print is a component of MapFish for printing templated cartographic maps. From 3.23.0 to before 3.28.28, 3.30.30, 3.31.22, 3.33.14, and 4.0.3, the attacker can execute arbitrary code in Dynamic table without being authenticated. This vulnerability is fixed in 3.28.28, 3.30.30, 3.31.22, 3.33.14, and 4.0.3.
Severity
9.3 (Critical)
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CWE
  • CWE-94 - Improper Control of Generation of Code ('Code Injection')
Assigner
References
Impacted products
Vendor Product Version
mapfish mapfish-print Affected: >= 3.23.0, < 3.28.28
Affected: >= 3.29.0, < 3.30.30
Affected: >= 3.31.0, < 3.31.21
Affected: >= 3.32.0, < 3.33.14
Affected: >= 3.34.0, < 4.0.3
Create a notification for this product.
camptocamp mapfish_print Affected: >= 3.23.0, < 3.28.28
Affected: >= 3.29.0, < 3.30.30
Affected: >= 3.31.0, < 3.31.21
Affected: >= 3.32.0, < 3.33.14
Affected: >= 3.34.0, < 4.0.3
Create a notification for this product.
org.mapfish print.print-lib Affected: >= 3.23.0, < 3.28.28
Affected: >= 3.29.0, < 3.30.30
Affected: >= 3.31.0, < 3.31.21
Affected: >= 3.32.0, < 3.33.14
Affected: >= 3.34.0, < 4.0.3
Create a notification for this product.
org.mapfish print.print-servlet Affected: >= 3.23.0, < 3.28.28
Affected: >= 3.29.0, < 3.30.30
Affected: >= 3.31.0, < 3.31.21
Affected: >= 3.32.0, < 3.33.14
Affected: >= 3.34.0, < 4.0.3
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-44672",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-28T15:25:47.863126Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-28T15:26:01.990Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "mapfish-print",
          "vendor": "mapfish",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 3.23.0, \u003c 3.28.28"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.29.0, \u003c 3.30.30"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.31.0, \u003c 3.31.21"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.32.0, \u003c 3.33.14"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.34.0, \u003c 4.0.3"
            }
          ]
        },
        {
          "product": "mapfish_print",
          "vendor": "camptocamp",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 3.23.0, \u003c 3.28.28"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.29.0, \u003c 3.30.30"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.31.0, \u003c 3.31.21"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.32.0, \u003c 3.33.14"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.34.0, \u003c 4.0.3"
            }
          ]
        },
        {
          "product": "print.print-lib",
          "vendor": "org.mapfish",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 3.23.0, \u003c 3.28.28"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.29.0, \u003c 3.30.30"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.31.0, \u003c 3.31.21"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.32.0, \u003c 3.33.14"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.34.0, \u003c 4.0.3"
            }
          ]
        },
        {
          "product": "print.print-servlet",
          "vendor": "org.mapfish",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 3.23.0, \u003c 3.28.28"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.29.0, \u003c 3.30.30"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.31.0, \u003c 3.31.21"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.32.0, \u003c 3.33.14"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.34.0, \u003c 4.0.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "mapfish-print is a component of MapFish for printing templated cartographic maps. From 3.23.0 to before 3.28.28, 3.30.30, 3.31.22, 3.33.14, and 4.0.3, the attacker can execute arbitrary code  in Dynamic table without being authenticated. This vulnerability is fixed in 3.28.28, 3.30.30, 3.31.22, 3.33.14, and 4.0.3."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-94",
              "description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-28T14:35:29.378Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/mapfish/mapfish-print/security/advisories/GHSA-q7m6-wpvf-mvwx",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/mapfish/mapfish-print/security/advisories/GHSA-q7m6-wpvf-mvwx"
        }
      ],
      "source": {
        "advisory": "GHSA-q7m6-wpvf-mvwx",
        "discovery": "UNKNOWN"
      },
      "title": "mapfish-print: Remote Code Injection (RCE) in Dynamic table"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-44672",
    "datePublished": "2026-05-28T14:35:29.378Z",
    "dateReserved": "2026-05-07T16:20:08.659Z",
    "dateUpdated": "2026-05-28T15:26:01.990Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2022-1883 (GCVE-0-2022-1883)

Vulnerability from cvelistv5 – Published: 2022-05-25 08:20 – Updated: 2024-08-03 00:17
VLAI
Title
SQL Injection in camptocamp/terraboard
Summary
SQL Injection in GitHub repository camptocamp/terraboard prior to 2.2.0.
Severity
9.6 (Critical)
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
CWE
  • CWE-89 - Improper Neutralization of Special Elements used in an SQL Command
Assigner
References
Impacted products
Vendor Product Version
camptocamp camptocamp/terraboard Affected: unspecified , < 2.2.0 (custom)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T00:17:00.965Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://huntr.dev/bounties/a25d15bd-cd23-487e-85cd-587960f1b9e7"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/camptocamp/terraboard/commit/2a5dbaac015dc0714b41a59995e24f5767f89ddc"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "camptocamp/terraboard",
          "vendor": "camptocamp",
          "versions": [
            {
              "lessThan": "2.2.0",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "SQL Injection in GitHub repository camptocamp/terraboard prior to 2.2.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.6,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-89",
              "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-05-25T08:20:11.000Z",
        "orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
        "shortName": "@huntrdev"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://huntr.dev/bounties/a25d15bd-cd23-487e-85cd-587960f1b9e7"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/camptocamp/terraboard/commit/2a5dbaac015dc0714b41a59995e24f5767f89ddc"
        }
      ],
      "source": {
        "advisory": "a25d15bd-cd23-487e-85cd-587960f1b9e7",
        "discovery": "EXTERNAL"
      },
      "title": "SQL Injection in camptocamp/terraboard",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@huntr.dev",
          "ID": "CVE-2022-1883",
          "STATE": "PUBLIC",
          "TITLE": "SQL Injection in camptocamp/terraboard"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "camptocamp/terraboard",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "2.2.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "camptocamp"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "SQL Injection in GitHub repository camptocamp/terraboard prior to 2.2.0."
            }
          ]
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.6,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://huntr.dev/bounties/a25d15bd-cd23-487e-85cd-587960f1b9e7",
              "refsource": "CONFIRM",
              "url": "https://huntr.dev/bounties/a25d15bd-cd23-487e-85cd-587960f1b9e7"
            },
            {
              "name": "https://github.com/camptocamp/terraboard/commit/2a5dbaac015dc0714b41a59995e24f5767f89ddc",
              "refsource": "MISC",
              "url": "https://github.com/camptocamp/terraboard/commit/2a5dbaac015dc0714b41a59995e24f5767f89ddc"
            }
          ]
        },
        "source": {
          "advisory": "a25d15bd-cd23-487e-85cd-587960f1b9e7",
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
    "assignerShortName": "@huntrdev",
    "cveId": "CVE-2022-1883",
    "datePublished": "2022-05-25T08:20:11.000Z",
    "dateReserved": "2022-05-25T00:00:00.000Z",
    "dateUpdated": "2024-08-03T00:17:00.965Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}