CVE-2024-36404 GeoTools Remote Code Execution (RCE) vulnerability in evaluating XPath expressions
| Reporter | Title | Published | Views | Family All 14 |
|---|---|---|---|---|
| The vulnerability of the GeoTools library, a software solution for managing and publishing geospatial data on the OSGeo GeoServer server, arises from improper code generation management. This vulnerability allows an attacker to execute arbitrary code. | 27 Mar 202500:00 | – | bdu_fstec | |
| CVE-2024-36404 | 2 Jul 202401:43 | – | circl | |
| GeoTools Security Vulnerabilities | 2 Jul 202400:00 | – | cnnvd | |
| CVE-2024-36404 | 2 Jul 202413:39 | – | cve | |
| GeoTools Remote Code Execution (RCE) vulnerability in evaluating XPath expressions | 5 Feb 202515:32 | – | github | |
| GeoServer and GeoTools - Remote Code Execution | 31 Jul 202606:09 | – | nuclei | |
| CVE-2024-36404 | 2 Jul 202414:15 | – | nvd | |
| OSGeo GeoTools RCE (CVE-2024-36404) | 2 Aug 202400:00 | – | nessus | |
| GHSA-W3PJ-WH35-FQ8W GeoTools Remote Code Execution (RCE) vulnerability in evaluating XPath expressions | 5 Feb 202515:32 | – | osv | |
| PT-2022-5014 · Apache · Apache Commons Jxpath | 6 Oct 202200:00 | – | ptsecurity |
10
[
{
"vendor": "geotools",
"product": "geotools",
"versions": [
{
"version": "< 29.6",
"status": "affected"
},
{
"version": ">= 30.0, < 30.4",
"status": "affected"
},
{
"version": ">= 31.0, < 31.2",
"status": "affected"
}
]
}
]10
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
02 Jul 2024 13:39Current
CVSS 3.19.8
EPSS0.74908