Description

GeoServer allows an unauthenticated attacker to send arbitrary requests to perform lookups on the internal network which is otherwise not accessible externally. An attacker may use this feature to perform SSRF (server-side request forgery) attacks on the server.

Remediation

Upgrade to the latest version of GeoServer

References

GeoServer allows SSRF via the option for setting a proxy host

SSRF Geoserver (CVE-2021-40822)

Related Vulnerabilities

Oracle Application Server Incorrect Calculation of Buffer Size Vulnerability (CVE-2004-1363)

Joomla CVE-2018-17856 Vulnerability (CVE-2018-17856)

PrestaShop Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-39525)

Microsoft SQL Server Remote Code Execution Vulnerability (CVE-2019-1068)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2013-2110)

Severity

High

Classification

CVE-2021-40822 CWE-918 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Acumonitor SSRF Known Vulnerabilities