2 matches found
CVE-2023-28442: Exposure of Sensitive Information to an Unauthorized Actor
GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data. Prior to versions 2.20.6, 2.19.6, and 2.18.7, anonymous users can obtain sensitive information about GeoNode configurations from the response of the /geoserver/rest/about/status...
7.5CVSS5.8AI score0.0064EPSS
SaveExploits0References2
PT-2023-21725
Name of the Vulnerable Software and Affected Versions GeoNode versions prior to 2.20.6 GeoNode versions prior to 2.19.6 GeoNode versions prior to 2.18.7 Description GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data. Anonymous users...
7.5CVSS0.0064EPSS
SaveExploits0References7
20