Vulnerabilities > CVE-2023-43795 - Server-Side Request Forgery (SSRF) vulnerability in Osgeo Geoserver

047910
CVSS 9.8 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
osgeo
CWE-918
critical
NVD
Published: 2023-10-25
Updated: 2023-11-01

Summary

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. The OGC Web Processing Service (WPS) specification is designed to process information from any server using GET and POST requests. This presents the opportunity for Server Side Request Forgery. This vulnerability has been patched in version 2.22.5 and 2.23.2.

Vulnerable Configurations

Part Description Count
Application
Osgeo
168

Common Weakness Enumeration (CWE)

References