Skip to content
OpenAdvisories

Package · Maven

org.geoserver.main:gs-main

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.3
    CVE-2024-34711

    GeoServer has improper ENTITY_RESOLUTION_ALLOWLIST URI validation in XML Processing (SSRF)

    GeoServer is an open source server that allows users to share and edit geospatial data. An improper URI validation vulnerability exists that enables an unauthorized attacker to perform XML External Entities (XEE) attack, then send GET request to any HTTP serv…

    geoserver geoserver org.geoserver.web:gs-web-app org.geoserver.main:gs-main Maven