DeutschShown in its original language — a full translation is planned for a future version.
GeoServer: Mehrere Schwachstellen
view advisory published 2025-06-09
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GeoServer ausnutzen, um Informationen offenzulegen oder Sicherheitsvorkehrungen zu umgehen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-27505US | —OT elevated | — | ||
GeoServer is an open source server that allows users to share and edit geospatial data. It is possible to bypass the default REST API security and access the index page. The REST A… | ||||
| CVE-2024-40625US | medium4.9 | — | ||
GeoServer is an open source server that allows users to share and edit geospatial data. The Coverage rest api /workspaces/{workspaceName}/coveragestores/{storeName}/{method}.{forma… | ||||
| CVE-2024-38524US | high7.5 | — | ||
GeoServer is an open source server that allows users to share and edit geospatial data. org.geowebcache.GeoWebCacheDispatcher.handleFrontPage(HttpServletRequest, HttpServletRespons… | ||||
| CVE-2024-34711US | high8.2 | — | ||
GeoServer is an open source server that allows users to share and edit geospatial data. An improper URI validation vulnerability exists that enables an unauthorized attacker to per… | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Security Advisory GHSA-h86g-x8mm-78m5 vom 2025-06-09external
- GitHub Security Advisory GHSA-jm79-7xhw-6f6f vom 2025-06-09external
- GitHub Security Advisory GHSA-mc43-4fqr-c965 vom 2025-06-09external
- GitHub Security Advisory GHSA-r4hf-r8gj-jgw2 vom 2025-06-09external
- WID-SEC-W-2025-1267 - CSAF Versionself
- WID-SEC-2025-1267 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan