En bref
- CVE-2026-46429 est une vulnérabilité MOYENNE (CVSS 5.5) touchant geonode.
- Correctif : mettre à jour vers 5.0.3 ou plus récent.
| Package | Affected versions | Patched versions |
|---|
| geonode PyPI | < 5.0.3
| 5.0.3
|
Description
The upload service validation can be circumvented with specially crafted requests, allowing for the storage and serving of malicious files.
NVD description
GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data. Prior to 5.0.3, specially crafted requests can circumvent GeoNode upload service validation, allowing a low-privileged remote user to store and serve malicious files. This issue is fixed in version 5.0.3.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free