CVE-2024-35230 Welcome and About GeoServer pages communicate version and revision information

🗓️ 16 Dec 2024 22:19:18Reported by GitHub_MType

GeoServer exposes version info on welcome page, upgrade to version 2.26.0 is advised.

Reporter	Title	Published	Views	Family All 8
NVD	CVE-2024-35230	16 Dec 202423:15	–	nvd
OSV	Welcome and About GeoServer pages communicate version and revision information	16 Dec 202422:18	–	osv
OSV	CVE-2024-35230	16 Dec 202423:15	–	osv
Vulnrichment	CVE-2024-35230 Welcome and About GeoServer pages communicate version and revision information	16 Dec 202422:18	–	vulnrichment
Github Security Blog	Welcome and About GeoServer pages communicate version and revision information	16 Dec 202422:18	–	github
CVE	CVE-2024-35230	16 Dec 202423:15	–	cve
Rapid7 Blog	Metasploit Weekly Wrap-Up 12/06/2024	6 Dec 202420:29	–	rapid7blog
Rapid7 Blog	Metasploit 2024 Annual Wrap-Up	3 Jan 202516:52	–	rapid7blog

[
  {
    "vendor": "geoserver",
    "product": "geoserver",
    "versions": [
      {
        "version": ">= 2.0.0, < 2.26.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/geoserver/geoserver/security/advisories/GHSA-6pfc-w86r-54q6
github	www.github.com/geoserver/geoserver/commit/74fdab745a5deff20ac99abca24d8695fe1a52f8
github	www.github.com/geoserver/geoserver/commit/8cd1590a604a10875de67b04995f1952f631f920

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

16 Dec 2024 22:18Current

CVSS35.3

EPSS0.0004

CWE-200