GeoServer allows SSRF via the option for setting a proxy host

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2021-40822 · ADVISORY
• geoserver/geoserver · PACKAGE
• geoserver/geoserver · WEB
• geoserver/geoserver release · WEB
• osgeo-org.atlassian.net/browse/GEOS-10229 · WEB
• osgeo-org.atlassian.net/browse/GEOS-10229 · WEB

Lỗ hổng khác của org.geoserver:gs-main

• CVE-2024-45747CAO 7.2GeoServer has a Server-Side Template Injection (SSTI) vulnerability in processing FreeMarker templates
• CVE-2025-58175CAO 8.2GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.26.4 and 2.27.3, a GeoServer tha…
• CVE-2024-34696TRUNG BÌNH 4.9GeoServer is an open source server that allows users to share and edit geospatial data. Starting in version 2.10.0 and prior to versions 2.2…
• CVE-2024-23640TRUNG BÌNH 4.8GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A stored cross-site scripti…
• CVE-2023-41877CAO 7.2GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A path traversal vulnerabil…