CVE-2021-40822

CVE-2021-40822 SSRF GeoServer Artículo: https://gccybermonks.com/posts/cve-2021-40822/ Laboratorio: Clona este repositorio: root@kitploit: git clone https://github.com/phor3nsic/CVE-2021-40822.git Inicia el laboratorio: root@kitploit: cd CVE-2021-40822 && docker-compose up Comprueba si este...

CVE-2021-40822

creationtimestamp| type| source ---|---|--- 2022-05-02 07:27:23+00:00| seen| https://t.me/cibsecurity/41702 2022-05-18 19:13:01+00:00| published-proof-of-concept| https://t.me/intelexch/13261 2023-04-27 09:58:59+00:00| confirmed|...

CVE-2021-40822

GeoServer versions 2.18.5 and 2.19.x up to 2.19.2 are affected by an SSRF vulnerability via the proxy host configuration. The issue is mitigated in later releases (notably 2.19.3 and beyond); broader fixes in 2.24.4/2.25.2 address related TestWfsPost servlet exposure. Remediation: upgrade to a fi...