The vulnerability of the implementation of the Web Map Service (WMS) protocol in the software for managing and publishing geospatial data on the OSGeo GeoServer server allows a perpetrator to disclose protected information and cause service failures.

The vulnerability of the Web Map Service WMS protocol implementation in the software for managing and publishing geospatial data on the OSGeo GeoServer server is related to an incorrect limitation on XML links to external objects. Exploiting this vulnerability could allow a malicious actor to...