DeutschShown in its original language — a full translation is planned for a future version.
GeoServer: Mehrere Schwachstellen
view advisory published 2025-11-25
Ein Angreifer kann mehrere Schwachstellen in GeoServer ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, um Informationen offenzulegen, und um einen Denial of Service Angriff durchzuführen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-21621US | — | — | ||
GeoServer is an open source server that allows users to share and edit geospatial data. Prior to version 2.25.0, a reflected cross-site scripting (XSS) vulnerability exists in the… | ||||
| CVE-2025-58360US | critical9.8OT critical | KEV | ||
GeoServer is an open source server that allows users to share and edit geospatial data. From version 2.26.0 to before 2.26.2 and before 2.25.6, an XML External Entity (XXE) vulnera… | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Advisory Database vom 2025-11-25external
- GitHub Advisory Database vom 2025-11-25external
- WID-SEC-W-2025-2676 - CSAF Versionself
- WID-SEC-2025-2676 - Portal Versionself
- CISA KEV: CVE-2025-58360 OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability vom 2025-12-11external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan