GeoServer WPS - Server Side Request Forgery

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. The OGC Web Processing Service WPS specification is designed to process information from any server using GET and POST requests. This presents the opportunity for Server Side Request...

GeoServer WFS - XXE Processing Vulnerability

GeoServer Web Feature Service WFS is vulnerable to an XML External Entity XXE processing attack due to improper handling of XML input. This vulnerability allows attackers to perform Out-of-Band OOB data exfiltration and Server-Side Request Forgery SSRF by exploiting the GeoTools library. id:...

GeoServer Demo Request Endpoint - Server Side Request Forgery

It is possible to achieve Server Side Request Forgery SSRF via the Demo request endpoint if Proxy Base URL has not been set. An unauthenticated user can supply a request that will be issued by the server, allowing enumeration of internal networks and, in the case of cloud instances, access to...

GeoServer - Missing Authorization on REST API Index

GeoServer contains a missing authorization vulnerability that allows unauthorized access to the REST API Index page, potentially exposing sensitive configuration information. id: CVE-2025-27505 info: name: GeoServer - Missing Authorization on REST API Index author: securitytaters severity: medium...

Exploit for Eval Injection in Geoserver

CVE-2024-36401 — Unauthenticated RCE in GeoServer !CVEhttp...

Geoserver - Server-Side Request Forgery

GeoServer through 2.18.5 and 2.19.x through 2.19.2 allows server-side request forgery via the option for setting a proxy host. id: CVE-2021-40822 info: name: Geoserver - Server-Side Request Forgery author: For3stCo1d,aringo-bf severity: high description: GeoServer through 2.18.5 and 2.19.x throug...

GeoServer and GeoTools - Remote Code Execution

GeoTools is an open source Java library that provides tools for geospatial data. Prior to versions 31.2, 30.4, and 29.6, Remote Code Execution RCE is possible if an application uses certain GeoTools functionality to evaluate XPath expressions supplied by user input. Versions 31.2, 30.4, and 29.6...

GeoServer RCE in Evaluating Property Name Expressions

In the GeoServer version prior to 2.25.1, 2.24.3 and 2.23.5 of GeoServer, multiple OGC request parameters allow Remote Code Execution RCE by unauthenticated users through specially crafted input against a default GeoServer installation due to unsafely evaluating property names as XPath expression...

GeoServer - XML External Entity Injection

GeoServer 2.26.0 to 2.26.2 and 2.25.6 contains an XML External Entity XXE injection caused by insufficient sanitization of XML input in /geoserver/wms GetMap operation, letting attackers disclose files or cause DoS, exploit requires crafted XML input. id: CVE-2025-58360 info: name: GeoServer - XM...

Exploit for Code Injection in Geoserver

CV...

GeoServer <1.2.2 - Remote Code Execution

Programs run on GeoServer before 1.2.2 which use jt-jiffle and allow Jiffle script to be provided via network request are susceptible to remote code execution. The Jiffle script is compiled into Java code via Janino, and executed. In particular, this affects downstream GeoServer 1.1.22. id:...

GeoServer OGC Filter - SQL Injection

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. GeoServer includes support for the OGC Filter expression language and the OGC Common Query Language CQL as part of the Web Feature Service WFS and Web Map Service WMS protocols. CQL is...

GHSA-W3W2-MPP5-92GM vulnerabilities

Vulnerabilities for packages: geoserver...

GHSA-MR6M-XJ7V-3CV3 vulnerabilities

Vulnerabilities for packages: geoserver...

CVE-2026-41044 vulnerabilities

Vulnerabilities for packages: geoserver...

CVE-2026-41043 vulnerabilities

Vulnerabilities for packages: geoserver...

GHSA-2JP3-2923-9H52 vulnerabilities

Vulnerabilities for packages: geoserver...

CVE-2026-40466 vulnerabilities

Vulnerabilities for packages: geoserver...

CVE-2026-5598 vulnerabilities

Vulnerabilities for packages: kayenta, ruby3.4-bouncy-castle-java, wso2is, druid, ghidra, ruby3.2-bouncy-castle-java, spark, kserve-modelmesh, wildfly, ruby4.0-bouncy-castle-java, jenkins, geoserver, apache-pulsar, elasticsearch, jruby, apache-hop, commercial-elasticsearch, gradle, apache-nifi,...

GHSA-P93R-85WP-75V3 vulnerabilities

Vulnerabilities for packages: kayenta, ruby3.4-bouncy-castle-java, wso2is, druid, ghidra, ruby3.2-bouncy-castle-java, spark, kserve-modelmesh, wildfly, ruby4.0-bouncy-castle-java, jenkins, geoserver, apache-pulsar, elasticsearch, jruby, apache-hop, commercial-elasticsearch, gradle, apache-nifi,...