CVE-2021-40822

creationtimestamp| type| source ---|---|--- 2022-05-02 07:27:23+00:00| seen| https://t.me/cibsecurity/41702 2022-05-18 19:13:01+00:00| published-proof-of-concept| https://t.me/intelexch/13261 2023-04-27 09:58:59+00:00| confirmed|...

CVE-2021-40822

GeoServer versions 2.18.5 and 2.19.x up to 2.19.2 are affected by an SSRF vulnerability via the proxy host configuration. The issue is mitigated in later releases (notably 2.19.3 and beyond); broader fixes in 2.24.4/2.25.2 address related TestWfsPost servlet exposure. Remediation: upgrade to a fi...