CVE-2021-40822

CVE-2021-40822 SSRF GeoServer Article: https://gccybermonks.com/posts/cve-2021-40822/ Lab: Clone this repository: git clone https://github.com/phor3nsic/CVE-2021-40822.git Start Lab: cd CVE-2021-40822 && docker-compose up Check if this target is vulnerable: python3 CVE-2021-40822.py -u...

CVE-2021-40822

creationtimestamp| type| source ---|---|--- 2022-05-02 07:27:23+00:00| seen| https://t.me/cibsecurity/41702 2022-05-18 19:13:01+00:00| published-proof-of-concept| https://t.me/intelexch/13261 2023-04-27 09:58:59+00:00| confirmed|...

CVE-2021-40822

GeoServer versions 2.18.5 and 2.19.x up to 2.19.2 are affected by an SSRF vulnerability via the proxy host configuration. The issue is mitigated in later releases (notably 2.19.3 and beyond); broader fixes in 2.24.4/2.25.2 address related TestWfsPost servlet exposure. Remediation: upgrade to a fi...