CVE-2022-24846

CVE-2022-24846 affects GeoWebCache (Java) via the disk quota mechanism performing unchecked JNDI lookups, enabling class deserialization and arbitrary code execution. The issue is tied to JNDI strings supplied from local config in GeoWebCache and a remote UI in GeoServer that requires admin login...

CVE-2023-5786

GeoServer GeoWebCache (up to 1.15.1) is affected by CVE-2023-5786. The vulnerability concerns unauthorized access via the /geoserver/gwc/rest.html page and can be acted on remotely; an exploit has been disclosed publicly. Several connected sources describe the issue as affecting GeoWebCache versi...