The vulnerability of the writeMasterPasswordInfo() method in the software for managing and publishing geodata on the OSGeo GeoServer server allows a perpetrator to execute arbitrary code, expose sensitive information, and cause service failure.

The vulnerability of the writeMasterPasswordInfo method in the software for managing and publishing geodata on the OSGeo GeoServer server is related to improper external management of file names or paths. Exploiting this vulnerability could allow an attacker to execute arbitrary code, disclose...