CVE-2021-40822

CVE-2021-40822 SSRF GeoServer 記事: https://gccybermonks.com/posts/cve-2021-40822/ ラボ: このリポジトリをクローン: root@kitploit: git clone https://github.com/phor3nsic/CVE-2021-40822.git ラボを起動: root@kitploit: cd CVE-2021-40822 && docker-compose up このターゲットが脆弱かどうかを確認: root@kitploit: python3 CVE-2021-40822.py -u...

CVE-2021-40822

creationtimestamp| type| source ---|---|--- 2022-05-02 07:27:23+00:00| seen| https://t.me/cibsecurity/41702 2022-05-18 19:13:01+00:00| published-proof-of-concept| https://t.me/intelexch/13261 2023-04-27 09:58:59+00:00| confirmed|...

CVE-2021-40822

GeoServer versions 2.18.5 and 2.19.x up to 2.19.2 are affected by an SSRF vulnerability via the proxy host configuration. The issue is mitigated in later releases (notably 2.19.3 and beyond); broader fixes in 2.24.4/2.25.2 address related TestWfsPost servlet exposure. Remediation: upgrade to a fi...