105 matches found
CVE-2023-25157
CVE-2023-25157 - GeoServer SQL 인젝션 - PoC CVE: CVE-2023-25157 날짜: 06/06/2023 공급업체/소프트웨어: GeoServer 심각도: 9.8/10 - 이 스크립트는 GeoServer에서 발생하는 OGC Filter SQL 인젝션 취약점에 대한 개념 증명PoC입니다. GeoServer는 지리공간 데이터 공유를 위한 인기 있는 오픈소스 소프트웨어 서버입니다. 대상 URL에 요청을 보내고 CQLFILTER 매개변수에 악성 페이로드를 주입하여 잠재적인 취약점을 악용합니다. 실험 목적으...
CVE-2023-25157
CVE-2023-25157 GeoServer OGC 필터 SQL 인젝션 취약점...
cve-2024-36401-geoserver-rce
CVE-2024-36401 — GeoServer における未認証 RCE CVE-2024-36401 は、地理空間データ向けに最も広く導入されているオープンソースサーバーである GeoServer における未認証のリモートコード実行（RCE）の脆弱性です。本リポジトリは、この脆弱性の完全かつ再現可能な調査資料です。このバグは eval インジェクション です。OGC 標準のパラメータを通じて、GeoServer は攻撃者が制御する プロパティ名 を GeoTools に渡します。GeoTools では Apache Commons JXPath がそれらを XPath...
CVE-2024-36401-poc
CVE-2024-36401 — GeoServer OGC XPath インジェクション RCE GeoServer 向けの、OGCフィルターvalueReferenceパラメータインジェクション（XPath/JXPath評価）を介した未認証リモートコード実行エクスプロイト。 免責事項： このツールは、許可された侵入テストおよびセキュリティ研究のみを目的としています。自分が所有していない、または明示的な書面による許可を得ていないシステムに対して使用しないでください。作者は、このツールの誤用または損害について一切の責任を負いません。 目次 概要 影響を受けるバージョン 技術的詳細 必要条...
GeoServer OGC Filter - SQL Injection
GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. GeoServer includes support for the OGC Filter expression language and the OGC Common Query Language CQL as part of the Web Feature Service WFS and Web Map Service WMS protocols. CQL is...
CVE-2023-25157
Lab CVE-2023-25157 と CVE-2023-25158 この Lab は GeoServer/PostGIS を使用して、ローカル環境で OGC Filter SQL injection を研究するためのもので、operator/setup モードと attacker モードが明確に分離されています。 CVE-2023-25157: GeoServer 製品の表面、WFS/WMS リクエストが JDBC filter encoding に入り込む。 CVE-2023-25158: 根本原因は GeoTools JDBC ライブラリにあり、GeoServer がこれを組み込...
CVE-2026-54354 MapServer: PostGIS Numeric Filter Value SQL Injection in MapServer Runtime Query Translation
MapServer is a system for developing web-based GIS applications. Prior to 8.6.4, MapServer's PostGIS runtime filter translation in src/mappostgis.cpp and msPostGISLayerTranslateFilter treats a filteritem as numeric when CONNECTIONTYPE POSTGIS and metadata such as gmltype=Integer are configured, b...
CVE-2026-55864
GeoNetwork is a catalog application to manage spatially referenced resources. Prior to 4.2.17 and 4.4.12, POST /api/tools/ogc/sld accepted a caller-supplied WMS server URL and performed a server-side HTTP GET without destination validation. An anonymous attacker could make the GeoNetwork server...
CVE-2026-55864
GeoNetwork is a catalog application for managing spatially referenced resources. An unauthenticated Server-Side Request Forgery (SSRF) exists in the SLD tooling endpoint POST /api/tools/ogc/sld, which accepted a caller-supplied WMS server URL and performed a server-side HTTP GET with no destinati...
CVE-2026-55864: Server-Side Request Forgery (SSRF)
GeoNetwork is a catalog application to manage spatially referenced resources. Prior to 4.2.17 and 4.4.12, POST /api/tools/ogc/sld accepted a caller-supplied WMS server URL and performed a server-side HTTP GET without destination validation. An anonymous attacker could make the GeoNetwork server...
Exploit for SQL Injection in Osgeo Geoserver
Lab CVE-2023-25157 va CVE-2023-25158 Lab nay dung GeoServer/P...
VulnCheck KEV: CVE-2026-76904
GeoTools is an open source Java library that provides tools for geospatial data. Starting in version 30.5 and prior to versions 33.6, 34.5, and 33.6, an SQL Injection Vulnerability is present when executing OGC Filters with PostGIS DataStore implementation: jsonArrayContains function; Requires...
ZeroDay vulnerabilities are exploited in GeoTools through OpenGeo
GeoTools, a widely used open-source Java library for geospatial data, has released updates to address the ZeroDay SQL injection vulnerability in the execution of OGC filter functions when used with JDBCDataStore and other data stores. This vulnerability is an older one, and it has recently been...
Exploit for SQL Injection in Osgeo Geoserver
GeoServer & GeoTools SQL Injection CVE-2023-25157 & CVE-2023-...
PYSEC-2026-2986 pygeoapi 0.23.x: Unauthenticated SSRF via OGC API - Processes Subscriber
Impact OGC API - Process execution requests can use the subscriber object to requests to internal HTTP services. Patches The issue has been patched in master branch and made available as part of the 0.23.3 release. The patch disables any HTTP requests made to internal resources by default unless...
CVE-2026-42352 pygeoapi 0.23.x: Unauthenticated SSRF via OGC API - Processes Subscriber
pygeoapi is a Python server implementation of the OGC API suite of standards. From version 0.23.0 to before version 0.23.3, OGC API process execution requests can use the subscriber object to requests to internal HTTP services. This issue has been patched in version 0.23.3...
GHSA-JGVC-94C8-3CHC pygeoapi 0.23.x: Unauthenticated SSRF via OGC API - Processes Subscriber
Impact OGC API - Process execution requests can use the subscriber object to requests to internal HTTP services. Patches The issue has been patched in master branch and made available as part of the 0.23.3 release. The patch disables any HTTP requests made to internal resources by default unless...
EUVD-2011-2685
Malware in sbrugna...