Junglewise Threat Intelligence

CVE-2024-23640: GeoServer's Style Publisher vulnerable to Stored Cross-Site Scripting (XSS)

CVE-2024-23640 · Severity: low · CVSS 3.1 · Published 2024-03-20

Technologies: org.geoserver:gs-main (Maven). Vendors: Maven.

Executive brief

GeoServer's Style Publisher vulnerable to Stored Cross-Site Scripting (XSS)

Affected products

  • Maven org.geoserver:gs-main
  • Maven org.geoserver:gs-ows

Related threats