Skip to content
Threat Feed
Subscribe

Vendor

GeoServer

2 briefs RSS
high advisory

GeoServer Server-Side Template Injection Vulnerability

An authenticated administrator can exploit a server-side template injection (SSTI) vulnerability in GeoServer's FreeMarker engine to execute arbitrary OS commands and perform unauthorized file operations.

gs-main +2 vulnerability rce geoserver
1t
critical advisory

Critical SQL Injection Vulnerability in GeoServer

A critical vulnerability in GeoServer allows remote, unauthenticated attackers to perform SQL injection attacks, potentially leading to remote code execution.

GeoServer sql-injection vulnerability gis
1t