CVE-2023-25157-and-CVE-2023-25158

GeoServer & GeoTools SQL Injection CVE-2023-25157 & CVE-2023-25158 이 저장소는 GeoServer 플랫폼 및 GeoTools 라이브러리에서 발견된 SQL 삽입 취약점에 대한 상세한 설명과 재현 단계를 포함하고 있습니다. 이 취약점에는 GeoServer의 경우 CVE-2023-25157, GeoTools의 경우 CVE-2023-25158 식별자가 할당되었습니다. GeoServer는 Java로 작성된 오픈소스 소프트웨어 서버로, 지리공간 데이터를 보고, 편집하고, 공유할 수 있는...

GeoServer and GeoTools - Remote Code Execution

GeoTools is an open source Java library that provides tools for geospatial data. Prior to versions 31.2, 30.4, and 29.6, Remote Code Execution RCE is possible if an application uses certain GeoTools functionality to evaluate XPath expressions supplied by user input. Versions 31.2, 30.4, and 29.6...

CVE-2022-24818

CVE-2022-24818: GeoServer 및 GeoTools에서 검사되지 않은 JNDI 조회를 통한 Java 역직렬화 GeoTools 라이브러리에는 검사되지 않은 JNDI 조회를 수행할 수 있는 여러 데이터 소스가 있으며, 이를 통해 클래스 역직렬화를 수행하고 임의 코드 실행을 초래할 수 있습니다. 예를 들어 GeoServer에서 발생할 수 있지만, 트리거하려면 관리자 수준 로그인이 필요합니다. 공급업체 공개: 이 취약점에 대한 공급업체의 공개 및 수정 사항은 여기에서 확인할 수 있습니다. 개념 증명: 자세한 내용과 악용...

CVE-2023-25157

Lab CVE-2023-25157 と CVE-2023-25158 この Lab は GeoServer/PostGIS を使用して、ローカル環境で OGC Filter SQL injection を研究するためのもので、operator/setup モードと attacker モードが明確に分離されています。 CVE-2023-25157: GeoServer 製品の表面、WFS/WMS リクエストが JDBC filter encoding に入り込む。 CVE-2023-25158: 根本原因は GeoTools JDBC ライブラリにあり、GeoServer がこれを組み込...

CVE-2023-25157-GeoServer-SQLi-Lab

GeoServer 및 GeoTools SQL Injection CVE-2023-25157 & CVE-2023-25158 — 취약점 실습 환경 및 PoC 보고서 Vulnerable Lab 실습 환경 및 GeoServerCVE-2023-25157와 GeoTools 라이브러리CVE-2023-25158의 SQL InjectionError-based 취약점에 대한 상세 분석 및 익스플로잇 보고서. 상세 분석 및 익스플로잇 보고서 공식 보고서에서 각 계층을 보여주는 PoC 이미지와 함께 전체 분석 문서를 확인하세요: 👉 상세 익스플로잇...

CVE-2024-36401-GeoServer-RCE

GeoServer의 RCE 취약점 CVE-2024-36401 - 탐지 스크립트 CVE-2024-36401은 지리공간 데이터 공유를 위한 오픈소스 서버인 GeoServer와 지리공간 데이터 처리를 위한 오픈소스 Java 라이브러리인 GeoTools에 영향을 미치는 심각한 보안 취약점입니다. 원격 코드 실행RCE 결함으로 식별된 이 취약점은 공격자가 영향을 받는 시스템에서 임의 코드를 실행할 수 있게 합니다. 취약점 및 그 영향에 대한 자세한 정보는 GeoServer 및 GeoTools 프로젝트에서 제공하는 권고문에서 확인할 수...

Exploit for SQL Injection in Osgeo Geoserver

Lab CVE-2023-25157 va CVE-2023-25158 Lab nay dung GeoServer/P...

The vulnerability of the jsonArrayContains() function in the GeoTools library, a software solution for administrative and publishing of geodata on the OSGeo GeoServer server, allows a perpetrator to execute arbitrary code.

The vulnerability of the jsonArrayContains function in the GeoTools library, a software solution for administrative and publishing of geodata on the OSGeo GeoServer server, is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability could allow an...

CVE-2026-76904

GeoTools is an open source Java library that provides tools for geospatial data. Starting in version 30.5 and prior to versions 33.6, 34.5, and 33.6, an SQL Injection Vulnerability is present when executing OGC Filters with PostGIS DataStore implementation: jsonArrayContains function; Requires...

GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers

Summary An SQL Injection Vulnerability has been found when executing OGC Filters with PostGIS DataStore implementation: jsonArrayContains function Requires PostGIS 12 or greater with a String or JSON field For PostGIS 12 and greater jsonArrayContains, , function writes into generated SQL without...

GHSA-MQJF-5F49-2FJH GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers

Summary An SQL Injection Vulnerability has been found when executing OGC Filters with PostGIS DataStore implementation: jsonArrayContains function Requires PostGIS 12 or greater with a String or JSON field For PostGIS 12 and greater jsonArrayContains, , function writes into generated SQL without...

EUVD-2026-64133

GeoTools is an open source Java library that provides tools for geospatial data. Starting in version 30.5 and prior to versions 33.6, 34.5, and 33.6, an SQL Injection Vulnerability is present when executing OGC Filters with PostGIS DataStore implementation: jsonArrayContains function; Requires...

CVE-2026-76904 GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers

GeoTools is an open source Java library that provides tools for geospatial data. Starting in version 30.5 and prior to versions 33.6, 34.5, and 33.6, an SQL Injection Vulnerability is present when executing OGC Filters with PostGIS DataStore implementation: jsonArrayContains function; Requires...

CVE-2026-76904 GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers

GeoTools is an open source Java library that provides tools for geospatial data. Starting in version 30.5 and prior to versions 33.6, 34.5, and 33.6, an SQL Injection Vulnerability is present when executing OGC Filters with PostGIS DataStore implementation: jsonArrayContains function; Requires...

CVE-2026-76904 GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers

GeoTools is an open source Java library that provides tools for geospatial data. Starting in version 30.5 and prior to versions 33.6, 34.5, and 33.6, an SQL Injection Vulnerability is present when executing OGC Filters with PostGIS DataStore implementation: jsonArrayContains function; Requires...

CVE-2026-76904

GeoTools (open-source Java geospatial library) is affected by an unauthenticated SQL injection in the jsonArrayContains OGC Filter function within the PostGIS DataStore implementation. Affected versions are 30.5 through 33.5 (branch 33) and through 34.4 (branch 34). The root cause is that the pa...

CVE-2026-76904: Improper Neutralization of Special Elements used in an SQL Command

GeoTools is an open source Java library that provides tools for geospatial data. Starting in version 30.5 and prior to versions 33.6, 34.5, and 33.6, an SQL Injection Vulnerability is present when executing OGC Filters with PostGIS DataStore implementation: jsonArrayContains function; Requires...

VulnCheck KEV: CVE-2026-76904

GeoTools is an open source Java library that provides tools for geospatial data. Starting in version 30.5 and prior to versions 33.6, 34.5, and 33.6, an SQL Injection Vulnerability is present when executing OGC Filters with PostGIS DataStore implementation: jsonArrayContains function; Requires...

The vulnerability of the jsonArrayContains() function in the GeoTools library, a software solution for administrative and publishing of geodata on the OSGeo GeoServer server, allows an attacker to disclose protected information and execute arbitrary code.

The vulnerability of the jsonArrayContains function in the GeoTools library, a software solution for administrative and publishing of geodata on the OSGeo GeoServer server, is related to the lack of protective measures for the SQL query structure during the processing of the CQLFILTER parameter...

ZeroDay vulnerabilities are exploited in GeoTools through OpenGeo

GeoTools, a widely used open-source Java library for geospatial data, has released updates to address the ZeroDay SQL injection vulnerability in the execution of OGC filter functions when used with JDBCDataStore and other data stores. This vulnerability is an older one, and it has recently been...