Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo

Web Server

GeoServer

GeoServer is an open source server for sharing geospatial data. Designed for interoperability it publishes data from any major spatial data source using open standards.

Official Site:

https://geoserver.org/

Severity Summary:

Critical: 4 High: 5 Medium: 11
Reference
Title
Severity
CVE-2023-25157
GeoServer Improper Neutralization of Special Elements used in an SQL Command
Critical
CVE-2023-35042
GeoServer Vulnerability
Critical
CVE-2024-36401
GeoServer Improper Control of Generation of Code (Code Injection) Vulnerability
Critical
CVE-2023-43795
GeoServer Server-Side Request Forgery
Critical
CVE-2023-51444
GeoServer Unrestricted Upload of File with Dangerous Type Vulnerability
High
CVE-2021-40822
GeoServer Server-Side Request Forgery
High
CVE-2022-24847
GeoServer Improper Neutralization of Special Elements used in an Expression Language Statement
High
CVE-2023-41877
GeoServer Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
High
CVE-2024-24749
GeoServer Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
High
CVE-2024-23643
GeoServer Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2024-23819
GeoServer Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2024-23818
GeoServer Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2024-23634
GeoServer Other Vulnerability
Medium
CVE-2024-23642
GeoServer Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2024-23640
GeoServer Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2024-23821
GeoServer Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2008-7227
GeoServer Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Medium
CVE-2024-34696
GeoServer Vulnerability
Medium
CVE-2023-41339
GeoServer Server-Side Request Forgery
Medium
CVE-2023-51445
GeoServer Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium