Skip to content
OpenAdvisories

Vendor

GeoNode

10 known vulnerabilities.

Products

GeoNode 10
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.8
    CVE-2026-33050 Public exploit

    GeoNode: OS command injection via uploaded file layer name

    GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data. Prior to 5.1.0, a crafted vector file layer name supplied during upload allows a low-privileged remote user to inject shell syntax and execute…

    GeoNode GeoNode geonode PyPI
  • High 7.5
    CVE-2023-42439

    GeoNode SSRF Bypass to return internal host data

    GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data. A SSRF vulnerability exists starting in version 3.2.0, bypassing existing controls on the software. This can allow a user to request internal …

    GeoNode GeoNode geonode PyPI
  • High 7.5
    CVE-2023-40017

    Geonode Server Side Request Forgery vulnerability

    GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data. In versions 3.2.0 through 4.1.2, the endpoint `/proxy/?url=` does not properly protect against server-side request forgery. This allows an att…

    GeoNode GeoNode geonode PyPI
  • High 7.5
    CVE-2023-28442

    Geoserver for GeoNode sensitive information leak

    GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data. Prior to versions 2.20.6, 2.19.6, and 2.18.7, anonymous users can obtain sensitive information about GeoNode configurations from the response …

    GeoNode GeoNode