Vulnerabilities in GeoNode

10 results

CVE-2023-42439HIGHGeoNode SSRF Bypass to return internal host dataEPSS 1.0%CVE-2023-26043MEDIUMXML External Entity (XXE) injection in GeoServer style upload functionalityEPSS 0.8%CVE-2023-40017HIGHGeonode Server Side Request Forgery vulnerabilityEPSS 0.8%CVE-2026-33050HIGHGeoNode: OS command injection via uploaded file layer nameEPSS 0.7%CVE-2023-28442HIGHGeoserver for GeoNode sensitive information leakEPSS 0.6%CVE-2024-27091MEDIUMGeoNode stored XSS to full account takeoverEPSS 0.4%CVE-2026-55649MEDIUMGeoNode has Stored XSS in Documents metadata abstract fieldEPSS 0.3%CVE-2026-46429MEDIUMGeoNode: Unrestricted File UploadEPSS 0.3%CVE-2026-39921MEDIUMGeoNode < 4.4.5, 5.0.2 SSRF via Document UploadEPSS 0.2%CVE-2026-39922MEDIUMGeoNode SSRF via Service RegistrationEPSS 0.2%