CVE-2022-24847

The OSGeo GeoServer software is vulnerable to an unchecked JNDI lookup due to improper input validation. An attacker with admin rights can exploit this via the GeoServer GUI or REST API to perform class deserialization , potentially resulting in arbitrary code execution . This flaw also affects t...