geoserver vulnerabilities

2023年7月23日 — CVE-2023-25157 and CVE-2023-25158 are serious vulnerabilities that could be exploited by attackers to gai...

geoserver vulnerabilities

2023年7月23日 — CVE-2023-25157 and CVE-2023-25158 are serious vulnerabilities that could be exploited by attackers to gain unauthorized access to GeoServer ... ,2023年2月20日 — This release addresses a security vulnerability and is considered an essential upgrade for production systems: CVE-2023-25158 OGC Filter SQL ...

相關軟體 GeoServer 資訊

GeoServer
GeoServer 是一個基於 Java 的軟件服務器,允許用戶查看和編輯地理空間數據。使用開放地理空間聯盟(OGC)制定的開放標準,GeoServer 允許在地圖創建和數據共享方面具有極大的靈活性.打開和共享您的空間數據 GeoServer 可讓您向世界顯示空間信息。實施網絡地圖服務(WMS)標準,GeoServer 可以創建各種輸出格式的地圖。 OpenLayers,一個免費的地圖庫,被集成到... GeoServer 軟體介紹

geoserver vulnerabilities 相關參考資料
CVE-2023-25157 - GeoServer SQL Injection - PoC

2023年6月6日 — It sends requests to the target URL and exploits potential vulnerabilities by injecting malicious payloads into the CQL_FILTER parameter. For ...

https://github.com

CVE-2023-25157: SQL Injection Vulnerabilities in GeoServer

2023年7月23日 — CVE-2023-25157 and CVE-2023-25158 are serious vulnerabilities that could be exploited by attackers to gain unauthorized access to GeoServer ...

https://ethicalhacking.uk

GeoServer 2.22.2 Release

2023年2月20日 — This release addresses a security vulnerability and is considered an essential upgrade for production systems: CVE-2023-25158 OGC Filter SQL ...

https://geoserver.org

Geoserver : Security vulnerabilities, CVEs

Security vulnerabilities related to Geoserver : List of vulnerabilities affecting any product of this vendor.

https://www.cvedetails.com

GeoServer release 2.22.0 - GeoSolutions

2023年6月22日 — In recent days, news of a new GeoServer vulnerability, CVE-2023-35042, has been released and has drawn some attention on Twitter and on some ...

https://www.geosolutionsgroup.

GeoServer SQL Injection Vulnerability Analysis (CVE-2023 ...

2023年7月5日 — GeoServer and GeoTools have released CVE-2023–25157 and CVE-2023–25158vulnerabilities, which contain SQL injection vulnerabilities in OGC query ...

https://medium.com

GeoServer SQLi (CVE-2023-25157) - Vulnerabilities

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. This version of GeoServer is vulnerable to an ...

https://www.acunetix.com

OGC Filter Injection Vulnerability Statement

2023年2月20日 — A vulnerability has located in the GeoTools Library that allows SQL Injection using OGC Filter and Function expressions. CVE-2023-25157 OGC ...

https://geoserver.org

Security Alert: Critical Vulnerability GeoServer

2023年6月7日 — A critical vulnerability in GeoServer has become relevant again. The vulnerability poses a significant risk to organisations.

https://www.eye.security

Spring4Shell RCE vulnerability

2022年4月1日 — A recently discovered vulnerability in the Spring (CVE-2022-22965) has been reported as affecting systems running Java 9+. Note systems using ...

https://geoserver.org