Skip to content
OpenAdvisories

Vendor

geonetwork

8 known vulnerabilities.

Products

core-geonetwork 7 GeoNetwork 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.8
    CVE-2026-53573

    core-geonetwork has an Open Redirect Bypass

    GeoNetwork is a catalog application to manage spatially referenced resources. From 3.12.0 until 4.2.16 and 4.4.11, unsafe redirect validation in GeonetworkOAuth2LoginAuthenticationFilter and KeycloakAuthenticationProcessingFilter permits an attacker-controlle…

    geonetwork core-geonetwork org.geonetwork-opensource:geonetwork Maven
  • Medium 6.5
    CVE-2022-50899

    Geonetwork 4.2.0 - XML External Entity (XXE)

    Geonetwork 3.10 through 4.2.0 contains an XML external entity vulnerability in PDF rendering that allows attackers to retrieve arbitrary files from the server. Attackers can exploit the insecure XML parser by crafting a malicious XML document with external en…

    geonetwork GeoNetwork