Skip to content
OpenAdvisories

Package · Maven

org.geonetwork-opensource:gn-web-app

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.8
    CVE-2026-55864 Scanner template

    GeoNetwork: Unauthenticaded Server-Side Request Forgery in SLD Tool

    GeoNetwork is a catalog application to manage spatially referenced resources. Prior to 4.2.17 and 4.4.12, POST /api/tools/ogc/sld accepted a caller-supplied WMS server URL and performed a server-side HTTP GET without destination validation. An anonymous attac…

    geonetwork core-geonetwork org.geonetwork-opensource:gn-web-app Maven
  • High 8.2
    GHSA-2p76-gc46-5fvc

    GeoNetwork affected by XML External Entity (XXE) processing vulnerability in WFS indexing REST API endpoint

    ### Impact GeoNetwork WFS Index functionality is affected by GeoTools XML External Entity (XXE) vulnerability during schema validation. This vulnerability is particularly severe as the REST API endpoint was not secured, potentially allowing unauthenticated at…

    org.geonetwork-opensource:gn-web-app org.geonetwork-opensource:gn-wfsfeature-harvester Maven