Vendor

geoserver

31 known vulnerabilities.

Products

geoserver 27 org.geoserver.web:gs-web-app 2 GeoWebCache 1 org.geoserver.web:gs-web-sec-core 1 org.geoserver.extension:gs-db2 1 org.geoserver:gs-main 1

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.8

CVE-2024-36401 Exploited Public exploit Scanner template EPSS 100%

Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver

GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.22.6, 2.23.6, 2.24.4, and 2.25.2, multiple OGC request parameters allow Remote Code Execution (RCE) by unauthenticated users through specially crafted …

geoserver geoserver org.geoserver.web:gs-web-app org.geoserver:gs-wms Maven

Jul 1, 2024
KEV Jul 15, 2024