Lucene search
+L

GeoTools Code Execution

🗓️ 27 Mar 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType 
bdu_fstec
 bdu_fstec
🔗 bdu.fstec.ru👁 20 Views

GeoTools vulnerability in GeoServer enables remote code execution via code generation and crafted path expressions.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
circl
Circl
CVE-2024-36404
2 Jul 202401:43
–circl
cnnvd
CNNVD
GeoTools Security Vulnerabilities
2 Jul 202400:00
–cnnvd
cve
CVE
CVE-2024-36404
2 Jul 202413:39
–cve
cvelist
Cvelist
CVE-2024-36404 GeoTools Remote Code Execution (RCE) vulnerability in evaluating XPath expressions
2 Jul 202413:39
–cvelist
github
Github Security Blog
GeoTools Remote Code Execution (RCE) vulnerability in evaluating XPath expressions
5 Feb 202515:32
–github
kitploit
Kitploit
GeoServerExploit
17 Oct 202620:57
–kitploit
mend
Mend
CVE-2024-36404
2 Jul 202413:39
–mend
nuclei
Nuclei
GeoServer and GeoTools - Remote Code Execution
16 Oct 202602:05
–nuclei
nvd
NVD
CVE-2024-36404
2 Jul 202414:15
–nvd
nessus
Tenable Nessus
OSGeo GeoTools RCE (CVE-2024-36404)
2 Aug 202400:00
–nessus
Rows per page
Vulners
Node
OR
osgeogeotoolsRange30.0–30.4
osgeogeotoolsRange31.0–31.2
osgeogeotoolsRange29.0–29.6
osgeogeotoolsRange<28.6
osgeogeoserverRange2.22.0–2.22.5

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

27 Mar 2025 00:00Current
7.4High risk
Vulners AI Score7.4
CVSS 39.8
CVSS 210
EPSS0.76065
20