CVE-2024-36404: Improper Neutralization of Directives in Dynamically Evaluated Code
| Reporter | Title | Published | Views | Family All 17 |
|---|---|---|---|---|
 | The vulnerability of the GeoTools library, a software solution for managing and publishing geospatial data on the OSGeo GeoServer server, arises from improper code generation management. This vulnerability allows an attacker to execute arbitrary code. | 27 Mar 202500:00 | – | bdu_fstec |
 | CVE-2024-36404 | 2 Jul 202401:43 | – | circl |
 | GeoTools Security Vulnerabilities | 2 Jul 202400:00 | – | cnnvd |
 | CVE-2024-36404 | 2 Jul 202413:39 | – | cve |
 | CVE-2024-36404 GeoTools Remote Code Execution (RCE) vulnerability in evaluating XPath expressions | 2 Jul 202413:39 | – | cvelist |
 | GeoTools Remote Code Execution (RCE) vulnerability in evaluating XPath expressions | 5 Feb 202515:32 | – | github |
 | GeoServerExploit | 8 Oct 202619:43 | – | kitploit |
 | CVE-2024-36404 | 2 Jul 202413:39 | – | mend |
 | GeoServer and GeoTools - Remote Code Execution | 8 Oct 202602:15 | – | nuclei |
 | CVE-2024-36404 | 2 Jul 202414:15 | – | nvd |
10
| Source | Link |
|---|---|
| nvd | www.nvd.nist.gov/vuln/detail/CVE-2024-36404 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
15 Apr 2026 00:00Current
8.1High risk
Vulners AI Score8.1
CVSS 3.19.8
EPSS0.76065
SSVC