GeoServer allows SSRF via the option for setting a proxy host

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2021-40822 · ADVISORY
• geoserver/geoserver · PACKAGE
• geoserver/geoserver · WEB
• geoserver/geoserver release · WEB
• osgeo-org.atlassian.net/browse/GEOS-10229 · WEB
• osgeo-org.atlassian.net/browse/GEOS-10229 · WEB

org.geoserver:gs-main のその他の脆弱性

• CVE-2024-45747高 7.2GeoServer has a Server-Side Template Injection (SSTI) vulnerability in processing FreeMarker templates
• CVE-2025-58175高 8.2GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.26.4 and 2.27.3, a GeoServer tha…
• CVE-2024-34696中 4.9GeoServer is an open source server that allows users to share and edit geospatial data. Starting in version 2.10.0 and prior to versions 2.2…
• CVE-2024-23640中 4.8GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A stored cross-site scripti…
• CVE-2023-41877高 7.2GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A path traversal vulnerabil…