{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/257240?format=json","vulnerability_id":"VCID-bb6j-68py-cbe8","summary":"","aliases":[{"alias":"CVE-2024-36401"},{"alias":"GHSA-6jj6-gm7p-fcvv"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/81917?format=json","purl":"pkg:maven/org.geoserver/gs-wfs@2.22.6","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.geoserver/gs-wfs@2.22.6"},{"url":"http://public2.vulnerablecode.io/api/packages/81906?format=json","purl":"pkg:maven/org.geoserver/gs-wfs@2.23.6","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.geoserver/gs-wfs@2.23.6"},{"url":"http://public2.vulnerablecode.io/api/packages/81909?format=json","purl":"pkg:maven/org.geoserver/gs-wfs@2.24.4","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.geoserver/gs-wfs@2.24.4"},{"url":"http://public2.vulnerablecode.io/api/packages/81911?format=json","purl":"pkg:maven/org.geoserver/gs-wfs@2.25.2","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.geoserver/gs-wfs@2.25.2"},{"url":"http://public2.vulnerablecode.io/api/packages/81919?format=json","purl":"pkg:maven/org.geoserver/gs-wms@2.22.6","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.geoserver/gs-wms@2.22.6"},{"url":"http://public2.vulnerablecode.io/api/packages/81914?format=json","purl":"pkg:maven/org.geoserver/gs-wms@2.23.6","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.geoserver/gs-wms@2.23.6"},{"url":"http://public2.vulnerablecode.io/api/packages/81918?format=json","purl":"pkg:maven/org.geoserver/gs-wms@2.24.4","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.geoserver/gs-wms@2.24.4"},{"url":"http://public2.vulnerablecode.io/api/packages/81907?format=json","purl":"pkg:maven/org.geoserver/gs-wms@2.25.2","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.geoserver/gs-wms@2.25.2"},{"url":"http://public2.vulnerablecode.io/api/packages/81916?format=json","purl":"pkg:maven/org.geoserver.web/gs-web-app@2.22.6","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.geoserver.web/gs-web-app@2.22.6"},{"url":"http://public2.vulnerablecode.io/api/packages/81913?format=json","purl":"pkg:maven/org.geoserver.web/gs-web-app@2.23.6","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.geoserver.web/gs-web-app@2.23.6"},{"url":"http://public2.vulnerablecode.io/api/packages/81895?format=json","purl":"pkg:maven/org.geoserver.web/gs-web-app@2.24.4","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.geoserver.web/gs-web-app@2.24.4"},{"url":"http://public2.vulnerablecode.io/api/packages/81915?format=json","purl":"pkg:maven/org.geoserver.web/gs-web-app@2.25.2","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.geoserver.web/gs-web-app@2.25.2"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/81905?format=json","purl":"pkg:maven/org.geoserver/gs-wfs@2.23.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-bb6j-68py-cbe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.geoserver/gs-wfs@2.23.0"},{"url":"http://public2.vulnerablecode.io/api/packages/81908?format=json","purl":"pkg:maven/org.geoserver/gs-wfs@2.24.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-bb6j-68py-cbe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.geoserver/gs-wfs@2.24.0"},{"url":"http://public2.vulnerablecode.io/api/packages/81910?format=json","purl":"pkg:maven/org.geoserver/gs-wfs@2.25.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-bb6j-68py-cbe8"},{"vulnerability":"VCID-p48y-1t98-n3h7"},{"vulnerability":"VCID-saav-9pyb-yyex"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.geoserver/gs-wfs@2.25.0"},{"url":"http://public2.vulnerablecode.io/api/packages/66262?format=json","purl":"pkg:maven/org.geoserver/gs-wms@2.23.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-bb6j-68py-cbe8"},{"vulnerability":"VCID-gu2a-1t4x-nfbv"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.geoserver/gs-wms@2.23.0"},{"url":"http://public2.vulnerablecode.io/api/packages/68269?format=json","purl":"pkg:maven/org.geoserver/gs-wms@2.24.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-bb6j-68py-cbe8"},{"vulnerability":"VCID-uj3b-xa6b-hkdz"},{"vulnerability":"VCID-xhzd-8vxq-3fb1"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.geoserver/gs-wms@2.24.0"},{"url":"http://public2.vulnerablecode.io/api/packages/70861?format=json","purl":"pkg:maven/org.geoserver/gs-wms@2.25.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-bb6j-68py-cbe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.geoserver/gs-wms@2.25.0"},{"url":"http://public2.vulnerablecode.io/api/packages/81912?format=json","purl":"pkg:maven/org.geoserver.web/gs-web-app@2.23.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-bb6j-68py-cbe8"},{"vulnerability":"VCID-gu2a-1t4x-nfbv"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.geoserver.web/gs-web-app@2.23.0"},{"url":"http://public2.vulnerablecode.io/api/packages/81900?format=json","purl":"pkg:maven/org.geoserver.web/gs-web-app@2.24.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5wjk-a8bz-3bbg"},{"vulnerability":"VCID-bb6j-68py-cbe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.geoserver.web/gs-web-app@2.24.0"},{"url":"http://public2.vulnerablecode.io/api/packages/70466?format=json","purl":"pkg:maven/org.geoserver.web/gs-web-app@2.25.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-bb6j-68py-cbe8"},{"vulnerability":"VCID-ykv3-1zt9-myan"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.geoserver.web/gs-web-app@2.25.0"}],"references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2024-36401","reference_id":"","reference_type":"","scores":[{"value":"0.94425","scoring_system":"epss","scoring_elements":"0.99984","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2024-36401"},{"reference_url":"https://github.com/geoserver/geoserver","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/geoserver/geoserver"},{"reference_url":"https://github.com/geotools/geotools/pull/4797","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""},{"value":"Act","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2024-07-13T03:55:17Z/"}],"url":"https://github.com/geotools/geotools/pull/4797"},{"reference_url":"https://osgeo-org.atlassian.net/browse/GEOT-7587","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H"},{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""},{"value":"Act","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2024-07-13T03:55:17Z/"}],"url":"https://osgeo-org.atlassian.net/browse/GEOT-7587"},{"reference_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-36401","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-36401"},{"reference_url":"https://www.vicarius.io/vsociety/posts/geoserver-rce-cve-2024-36401","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.vicarius.io/vsociety/posts/geoserver-rce-cve-2024-36401"},{"reference_url":"https://github.com/Warxim/CVE-2022-41852?tab=readme-ov-file#workaround-for-cve-2022-41852","reference_id":"CVE-2022-41852?TAB=README-OV-FILE#WORKAROUND-FOR-CVE-2022-41852","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""},{"value":"Act","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2024-07-13T03:55:17Z/"}],"url":"https://github.com/Warxim/CVE-2022-41852?tab=readme-ov-file#workaround-for-cve-2022-41852"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2024-36401","reference_id":"CVE-2024-36401","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-36401"},{"reference_url":"https://github.com/advisories/GHSA-6jj6-gm7p-fcvv","reference_id":"GHSA-6jj6-gm7p-fcvv","reference_type":"","scores":[{"value":"CRITICAL","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-6jj6-gm7p-fcvv"},{"reference_url":"https://github.com/geoserver/geoserver/security/advisories/GHSA-6jj6-gm7p-fcvv","reference_id":"GHSA-6jj6-gm7p-fcvv","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H"},{"value":"CRITICAL","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""},{"value":"Act","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2024-07-13T03:55:17Z/"}],"url":"https://github.com/geoserver/geoserver/security/advisories/GHSA-6jj6-gm7p-fcvv"},{"reference_url":"https://github.com/geotools/geotools/security/advisories/GHSA-w3pj-wh35-fq8w","reference_id":"GHSA-w3pj-wh35-fq8w","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""},{"value":"Act","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2024-07-13T03:55:17Z/"}],"url":"https://github.com/geotools/geotools/security/advisories/GHSA-w3pj-wh35-fq8w"}],"weaknesses":[{"cwe_id":94,"name":"Improper Control of Generation of Code ('Code Injection')","description":"The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment."},{"cwe_id":95,"name":"Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')","description":"The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call (e.g. eval)."},{"cwe_id":937,"name":"OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."},{"cwe_id":1035,"name":"OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."}],"exploits":[{"date_added":"2024-07-15","description":"OSGeo GeoServer GeoTools contains an improper neutralization of directives in dynamically evaluated code vulnerability due to unsafely evaluating property names as XPath expressions. This allows unauthenticated attackers to conduct remote code execution via specially crafted input.","required_action":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","due_date":"2024-08-05","notes":"This vulnerability affects an open-source component, third-party library, or a protocol used by different products. For more information, please see: https://github.com/geoserver/geoserver/security/advisories/GHSA-6jj6-gm7p-fcvv, https://github.com/geotools/geotools/pull/4797 ;   https://nvd.nist.gov/vuln/detail/CVE-2024-36401","known_ransomware_campaign_use":false,"source_date_published":null,"exploit_type":null,"platform":null,"source_date_updated":null,"data_source":"KEV","source_url":null},{"date_added":null,"description":"GeoServer is an open-source software server written in Java that provides\n          the ability to view, edit, and share geospatial data.\n          It is designed to be a flexible, efficient solution for distributing geospatial data\n          from a variety of sources such as Geographic Information System (GIS) databases,\n          web-based data, and personal datasets.\n          In the GeoServer versions < 2.23.6, >= 2.24.0, < 2.24.4 and >= 2.25.0, < 2.25.1,\n          multiple OGC request parameters allow Remote Code Execution (RCE) by unauthenticated users\n          through specially crafted input against a default GeoServer installation due to unsafely\n          evaluating property names as XPath expressions.\n          An attacker can abuse this by sending a POST request with a malicious xpath expression\n          to execute arbitrary commands as root on the system.","required_action":null,"due_date":null,"notes":"Stability:\n  - crash-safe\nReliability:\n  - repeatable-session\nSideEffects:\n  - ioc-in-logs\n  - artifacts-on-disk\n","known_ransomware_campaign_use":false,"source_date_published":"2024-07-01","exploit_type":null,"platform":"Linux,Unix,Windows","source_date_updated":null,"data_source":"Metasploit","source_url":"https://github.com/rapid7/metasploit-framework/tree/master/modules/exploits/multi/http/geoserver_unauth_rce_cve_2024_36401.rb"}],"severity_range_score":"9.0 - 10.0","exploitability":"2.0","weighted_severity":"9.0","risk_score":10.0,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-bb6j-68py-cbe8"}