Geosolutionsgroup vulnerabilities
We track 2 vulnerabilities in Geosolutionsgroup products across 2 products. 2 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on August 24, 2023.
2vulnerabilities
1critical
1high
1exploited
8.8average CVSS score
Latest Geosolutionsgroup vulnerabilities
- 7.5 High severity
geonode: Server-Side Request Forgery
GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data. In versions 3.2.0 through 4.1.2, the endpoint `/proxy/?url=` does not properly protect against server-side request forgery. This allows an atta
- 10.0 Critical severity
OSGeo GeoServer JAI-EXT Code Injection Exploited
JAI-EXT is an open-source project which aims to extend the Java Advanced Imaging (JAI) API. Programs allowing Jiffle script to be provided via network request can lead to a Remote Code Execution as the Jiffle script is compiled into Java code via Janino, and e