Skip to content
OpenAdvisories

Package · Maven

org.geoserver:gs-main

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-58175

    GeoServer has a Server-Side Request Forgery (SSRF) Vulnerability in its XML Entity Resolution

    GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.26.4 and 2.27.3, a GeoServer that uses `ENTITY_RESOLUTION_ALLOWLIST` may allow attacker to perform unauthenticated Server-Side Request Forgery (SSRF). …

    geoserver org.geoserver.web:gs-web-app org.geoserver:gs-main org.geoserver.web:gs-web-app Maven
  • Medium 4.5
    CVE-2024-34696

    GeoServer's Server Status shows sensitive environmental variables and Java properties

    GeoServer is an open source server that allows users to share and edit geospatial data. Starting in version 2.10.0 and prior to versions 2.24.4 and 2.25.1, GeoServer's Server Status page and REST API lists all environment variables and Java properties to any …

    geoserver geoserver org.geoserver.web:gs-web-app org.geoserver:gs-main Maven
  • Medium 4.8
    CVE-2024-23640

    GeoServer Stored Cross-Site Scripting (XSS) vulnerability in Style Publisher

    GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 2.23.3 and 2.24.0 that enables an authenticated administrator with w…

    geoserver geoserver org.geoserver:gs-main org.geoserver:gs-ows Maven