GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers
85Vexday Risk Score
Corrige ahora. Ella explotación observada por VulnCheck y tiene exploit funcional público.
ssvc Actcvss 9.8epss 1.8%
de la publicación al arma0 días
Publicada en NVD21 ago
1ª PoC16 ago
VulnCheck21 ago
probabilidad de explotación
1.8%top 23% de las CVE
explotación observada
síVulnCheck
4 exploit(s) público(s)
GeoTools is an open source Java library that provides tools for geospatial data. Starting in version 30.5 and prior to versions 33.6, 34.5, and 33.6, an SQL Injection Vulnerability is present when executing OGC Filters with PostGIS DataStore implementation: `jsonArrayContains` function; Requires PostGIS 12 or greater with a String or JSON field. For PostGIS 12 and greater `jsonArrayContains(<column>, <pointer>, <value>)` function writes `<value>` into generated SQL without escaping. Patches are available in versions 33.6, 34.5, and 33.6. No known workaround is available. To limit scope of SQL Injection the PostGIS connection pool should be configured with limited rights.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
geotools · geotoolsPoCs públicas encontradas — 4
githubgithub.com/YonLiud/CVE-2026-76904★ 3githubgithub.com/bickZero93/CVE-2026-76904★ 0vulncheckvulncheck.com/xdb/a84bac21ea28no verificadovulncheckvulncheck.com/xdb/ba840cc25ac9no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
https://github.com/geotools/geotools/commit/d821c4d321dd91c22e31fcd5b1ce676645da5176https://github.com/geotools/geotools/pull/5829https://github.com/geotools/geotools/releases/tag/33.6https://github.com/geotools/geotools/releases/tag/34.5https://github.com/geotools/geotools/releases/tag/35.1https://github.com/geotools/geotools/security/advisories/GHSA-mqjf-5f49-2fjhhttps://osgeo-org.atlassian.net/browse/GEOT-7589https://osgeo-org.atlassian.net/browse/GEOT-7958https://osgeo-org.atlassian.net/browse/GEOT-7959