Search for packages
| purl | pkg:maven/org.geoserver.web/gs-web-app@2.27.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2025-58175
Aliases: GHSA-x4r9-gmw3-hxww |
GeoServer has a Server-Side Request Forgery (SSRF) Vulnerability in its XML Entity Resolution A GeoServer that uses `ENTITY_RESOLUTION_ALLOWLIST` may allow … |
Not vulnerable Not vulnerable |
|
CVE-2025-52465
Aliases: GHSA-7qmg-grcp-qf25 |
GeoServer has an arbitrary file write vulnerability in its Master Password Dump Page A vulnerability exists that allows an authenticated … |
Not vulnerable Not vulnerable |
|
GHSA-jj54-8f66-c5pc
Aliases: CVE-2025-30220 |
[XBOW-025-068] XML External Entity (XXE) Processing Vulnerability in GeoServer WFS Service ## Summary GeoServer Web Feature Service (WFS) web service … |
Not vulnerable Not vulnerable |
|
GHSA-7qmg-grcp-qf25
Aliases: CVE-2025-52465 |
GeoServer has an arbitrary file write vulnerability in its Master Password Dump Page ### Summary A vulnerability exists that allows … |
Not vulnerable |
|
GHSA-x4r9-gmw3-hxww
Aliases: CVE-2025-58175 |
GeoServer has a Server-Side Request Forgery (SSRF) Vulnerability in its XML Entity Resolution ### Summary A GeoServer that uses `ENTITY_RESOLUTION_ALLOWLIST` … |
Not vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-wf6j-gr27-g7ch
|
GeoServer has a Server-Side Template Injection (SSTI) vulnerability in processing FreeMarker templates ### Summary A server-side template injection (SSTI) vulnerability … |
CVE-2024-45747
|