Vulnerabilities in GeoServer
31 resultsCVE-2024-23642MEDIUMGeoServer Stored Cross-Site Scripting (XSS) vulnerability in Simple SVG RendererEPSS 0.4%CVE-2024-23818MEDIUMGeoServer Stored Cross-Site Scripting (XSS) vulnerability in WMS OpenLayers FormatEPSS 0.4%CVE-2024-23819MEDIUMGeoServer Stored Cross-Site Scripting (XSS) vulnerability in MapML HTML PageEPSS 0.4%CVE-2024-23821MEDIUMGeoServer's GWC Demos Page vulnerable to Stored Cross-Site Scripting (XSS)EPSS 0.4%CVE-2024-34696MEDIUM GeoServer's Server Status shows sensitive environmental variables and Java propertiesEPSS 0.4%CVE-2024-38524MEDIUMGWC Home Page communicate version and revision informationEPSS 0.4%CVE-2025-52465HIGHGeoServer has an arbitrary file write vulnerability in its Master Password Dump PageEPSS 0.4%CVE-2024-40625MEDIUMGeoServer Coverage REST API Allows Server Side Request ForgeryEPSS 0.3%CVE-2025-58175MEDIUMGeoServer has a Server-Side Request Forgery (SSRF) Vulnerability in its XML Entity ResolutionEPSS 0.3%CVE-2024-34711CRITICALGeoServer has improper ENTITY_RESOLUTION_ALLOWLIST URI validation in XML Processing (SSRF)EPSS 0.3%CVE-2025-21621MEDIUMGeoServer Reflected Cross-Site Scripting (XSS) vulnerability in WMS GetFeatureInfo HTML formatEPSS 0.3%