CVE-2021-40822

CVE-2021-40822 SSRF GeoServer 文章： https://gccybermonks.com/posts/cve-2021-40822/ 实验环境： 克隆此仓库： root@kitploit: git clone https://github.com/phor3nsic/CVE-2021-40822.git 启动实验环境： root@kitploit: cd CVE-2021-40822 && docker-compose up 检查目标是否存在漏洞： root@kitploit: python3 CVE-2021-40822.py -u...

CVE-2021-40822

creationtimestamp| type| source ---|---|--- 2022-05-02 07:27:23+00:00| seen| https://t.me/cibsecurity/41702 2022-05-18 19:13:01+00:00| published-proof-of-concept| https://t.me/intelexch/13261 2023-04-27 09:58:59+00:00| confirmed|...

CVE-2021-40822

GeoServer versions 2.18.5 and 2.19.x up to 2.19.2 are affected by an SSRF vulnerability via the proxy host configuration. The issue is mitigated in later releases (notably 2.19.3 and beyond); broader fixes in 2.24.4/2.25.2 address related TestWfsPost servlet exposure. Remediation: upgrade to a fi...