Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.geoserver:gs-restconfig

3 known vulnerabilities (1 high, 2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 1 high, 2 medium
Registry
Maven Central

Advisories 3

  • CVE-2024-23634Medium 6.0

    GeoServer arbitrary file renaming vulnerability in REST Coverage/Data Store API

    Affected: fixed in 2.23.5; from 2.24.0, fixed in 2.24.2.

  • CVE-2023-51445Medium 4.8

    GeoServer Stored Cross-Site Scripting (XSS) vulnerability in REST Resources API

    Affected: fixed in 2.23.3.

  • GeoServer arbitrary file upload vulnerability in REST Coverage Store API

    Affected: fixed in 2.23.4; from 2.24.0, fixed in 2.24.1.