Description

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. This version of GeoServer is vulnerable to an RCE vulnerability.

Remediation

Upgrade to the latest version of GeoServer.

References

GitHub Advisory GHSA-6jj6-gm7p-fcvv

Related Vulnerabilities

Phusion Passenger Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2018-12026)

TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-21365)

Oracle Application Server CVE-2007-5517 Vulnerability (CVE-2007-5517)

MediaWiki Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2023-45364)

Claroline Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-6267)

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

Tags

Code Execution Known Vulnerabilities CWE-94 CVE-2024-36401