org.geoserver:gs-wfs
Maven · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| GeoServer RCE due to improper control of generation of code in jai-ext`Jiffle` map algebra language | org.geoserver:gs-wfsorg.geoserver:gs-wms | Maven | Critical | Fix reported | |
| [XBOW-025-068] XML External Entity (XXE) Processing Vulnerability in GeoServer WFS Service | org.geoserver.web:gs-web-apporg.geoserver:gs-wfs | Maven | High | Fix reported | |
| Remote Code Execution (RCE) vulnerability in geoserver | org.geoserver.web:gs-web-apporg.geoserver:gs-wfs | Maven | Critical | Fix reported | |
| GeoServer vulnerable to SSRF in TestWfsPost for specific targets, e.g. PHP + Nginx | org.geoserver:gs-wfs | Maven | High | Fix reported | |
| GeoServer Vulnerable to Unauthenticated SSRF via TestWfsPost | org.geoserver.web:gs-apporg.geoserver:gs-wfs | Maven | High | Fix reported |