Vulnerabilidades en opengeos
10 resultadosAnálisis Vexday
A OpenGeos apresenta 9 vulnerabilidades catalogadas, com 8 delas em nível crítico, porém nenhuma está sob exploração ativa conhecida no momento. A fraqueza dominante identificada é validação inadequada de entrada (CWE-20), padrão que concentra o risco em falhas de sanitização de dados, exigindo atenção em testes de segurança defensivos. O risco, embora substancial em severidade, não apresenta pressão imediata de ataques, permitindo janela para remediação planejada.
CVE-2024-41115CRITICALRemote code execution in streamlit geospatial in pages/1_📷_Timelapse.py MODIS Ocean Color SMI option paletteEPSS 1.5%CVE-2024-41119CRITICALstreamlit-geospatial remote code execution in pages/8_🏜️_Raster_Data_Visualization.pyEPSS 1.4%CVE-2024-41113CRITICALRemote code execution in streamlit geospatial in pages/1_📷_Timelapse.py Any Earth Engine ImageCollection option vis_paramsEPSS 1.4%CVE-2024-41112CRITICALRemote code execution in streamlit geospatial in pages/1_📷_Timelapse.py Any Earth Engine ImageCollection option paletteEPSS 1.4%CVE-2024-41114CRITICALRemote code execution in streamlit geospatial in pages/1_📷_Timelapse.py MODIS Gap filled Land Surface Temperature Daily optionEPSS 1.4%CVE-2024-41116CRITICALRemote code execution in streamlit geospatial in pages/1_📷_Timelapse.py MODIS Ocean Color SMI option vis_paramsEPSS 1.3%CVE-2024-41117CRITICALRemote code execution in streamlit geospatial in pages/10_🌍_Earth_Engine_Datasets.pyEPSS 1.3%CVE-2024-41120CRITICALstreamlit-geospatial blind SSRF in pages/9_🔲_Vector_Data_Visualization.pyEPSS 0.8%CVE-2024-41118HIGHstreamlit-geospatial blind SSRF in pages/7_📦_Web_Map_Service.pyEPSS 0.7%CVE-2026-86806MEDIUMopengeos GeoLibre _is_within_roots server-side request forgeryEPSS 0.5%