Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.geoserver.web/gs-web-app@2.27.3
purl pkg:maven/org.geoserver.web/gs-web-app@2.27.3
This package is not known to be subject of any advisories.
Vulnerabilities fixed by this package (4)

Advisory Summary Aliases
CVE-2025-58175
GeoServer has a Server-Side Request Forgery (SSRF) Vulnerability in its XML Entity Resolution A GeoServer that uses `ENTITY_RESOLUTION_ALLOWLIST` may allow … GHSA-x4r9-gmw3-hxww
CVE-2025-52465
GeoServer has an arbitrary file write vulnerability in its Master Password Dump Page A vulnerability exists that allows an authenticated … GHSA-7qmg-grcp-qf25
GHSA-7qmg-grcp-qf25
GeoServer has an arbitrary file write vulnerability in its Master Password Dump Page ### Summary A vulnerability exists that allows … CVE-2025-52465
GHSA-x4r9-gmw3-hxww
GeoServer has a Server-Side Request Forgery (SSRF) Vulnerability in its XML Entity Resolution ### Summary A GeoServer that uses `ENTITY_RESOLUTION_ALLOWLIST` … CVE-2025-58175