Vulnerabilities > Osgeo > Geoserver

DATE CVE VULNERABILITY TITLE RISK
2023-10-25 CVE-2023-41339 Server-Side Request Forgery (SSRF) vulnerability in Osgeo Geoserver
GeoServer is an open source software server written in Java that allows users to share and edit geospatial data.
network
low complexity
osgeo CWE-918
5.3
2023-10-25 CVE-2023-43795 Server-Side Request Forgery (SSRF) vulnerability in Osgeo Geoserver
GeoServer is an open source software server written in Java that allows users to share and edit geospatial data.
network
low complexity
osgeo CWE-918
critical
9.8
2023-02-21 CVE-2023-25157 SQL Injection vulnerability in Osgeo Geoserver
GeoServer is an open source software server written in Java that allows users to share and edit geospatial data.
network
low complexity
osgeo CWE-89
critical
9.8
2022-05-02 CVE-2021-40822 Server-Side Request Forgery (SSRF) vulnerability in Osgeo Geoserver
GeoServer through 2.18.5 and 2.19.x through 2.19.2 allows SSRF via the option for setting a proxy host.
network
low complexity
osgeo CWE-918
5.0
2022-04-13 CVE-2022-24847 Expression Language Injection vulnerability in Osgeo Geoserver
GeoServer is an open source software server written in Java that allows users to share and edit geospatial data.
network
low complexity
osgeo CWE-917
7.2