Executive brief
Welcome and About GeoServer pages communicate version and revision information
Affected products
- Maven org.geoserver.web:gs-web-core
- Maven org.geoserver.web:gs-web-app
Junglewise Threat Intelligence
CVE-2024-35230: Welcome and About GeoServer pages communicate version and revision information
CVE-2024-35230 · Severity: low · CVSS 3.1 · Published 2024-12-16
Technologies: org.geoserver.web:gs-web-app (Maven). Vendors: Maven.
Related threats
- GeoServer Server-Side Template Injection in FreeMarker templates
- GeoServer has a Reflected Cross-Site Scripting (XSS) vulnerability in its WMS GetFeatureInfo HTML format
- Coverage REST API Server Side Request Forgery
- GeoServer has improper ENTITY_RESOLUTION_ALLOWLIST URI validation in XML Processing (SSRF)
- PartialBufferOutputStream2 flush issues