Skip to content
OpenAdvisories

Vendor

geoserver

31 known vulnerabilities.

Products

geoserver 27 org.geoserver.web:gs-web-app 2 GeoWebCache 1 org.geoserver.web:gs-web-sec-core 1 org.geoserver.extension:gs-db2 1 org.geoserver:gs-main 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.2
    CVE-2025-58360 Exploited Public exploit Scanner template EPSS 61%

    GeoServer is vulnerable to an Unauthenticated XML External Entities (XXE) attack via WMS GetMap feature

    GeoServer is an open source server that allows users to share and edit geospatial data. From version 2.26.0 to before 2.26.2 and before 2.25.6, an XML External Entity (XXE) vulnerability was identified. The application accepts XML input through a specific end…

    geoserver geoserver org.geoserver.web:gs-web-app org.geoserver:gs-wms Maven
    KEV Dec 11, 2025
  • High 7.2
    CVE-2023-51444 Public exploit

    GeoServer arbitrary file upload vulnerability in REST Coverage Store API

    GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. An arbitrary file upload vulnerability exists in versions prior to 2.23.4 and 2.24.1 that enables an authenticated administrator with permissions …

    geoserver geoserver org.geoserver:gs-restconfig org.geoserver:gs-platform Maven