Skip to content
OpenAdvisories

Vendor

geoserver

31 known vulnerabilities.

Products

geoserver 27 org.geoserver.web:gs-web-app 2 GeoWebCache 1 org.geoserver.web:gs-web-sec-core 1 org.geoserver.extension:gs-db2 1 org.geoserver:gs-main 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.9
    CVE-2025-30220 Scanner template EPSS 44%

    GeoTools, GeoServer, and GeoNetwork XML External Entity (XXE) Processing Vulnerability in XSD schema handling

    GeoServer is an open source server that allows users to share and edit geospatial data. GeoTools Schema class use of Eclipse XSD library to represent schema data structure is vulnerable to XML External Entity (XXE) exploit. This impacts whoever exposes XML pr…

    geoserver geoserver org.geoserver.web:gs-web-app org.geoserver:gs-wfs Maven
  • Critical 9.3
    CVE-2024-34711

    GeoServer has improper ENTITY_RESOLUTION_ALLOWLIST URI validation in XML Processing (SSRF)

    GeoServer is an open source server that allows users to share and edit geospatial data. An improper URI validation vulnerability exists that enables an unauthorized attacker to perform XML External Entities (XEE) attack, then send GET request to any HTTP serv…

    geoserver geoserver org.geoserver.web:gs-web-app org.geoserver.main:gs-main Maven
  • Critical 9.8
    CVE-2024-36401 Exploited Public exploit Scanner template EPSS 100%

    Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver

    GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.22.6, 2.23.6, 2.24.4, and 2.25.2, multiple OGC request parameters allow Remote Code Execution (RCE) by unauthenticated users through specially crafted …

    geoserver geoserver org.geoserver.web:gs-web-app org.geoserver:gs-wms Maven
    KEV Jul 15, 2024
  • Critical 9.8
    CVE-2023-25157 Public exploit Scanner template EPSS 86%

    Unfiltered SQL Injection Vulnerabilities in Geoserver

    GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. GeoServer includes support for the OGC Filter expression language and the OGC Common Query Language (CQL) as part of the Web Feature Service (WFS)…

    geoserver geoserver org.geoserver.community:gs-jdbcconfig Maven