Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 9
Reset filtersGeoServer is vulnerable to Unauthenticated XML External Entities (XXE) attack via WMS GetMap feature
GeoServer has a Reflected Cross-Site Scripting (XSS) vulnerability in its WMS GetFeatureInfo HTML format
GeoServer Infinite Loop Vulnerability in Jiffle process
Remote Code Execution (RCE) vulnerability in geoserver
GeoServer's WMS OpenLayers Format vulnerable to Stored Cross-Site Scripting (XSS)
GeoServer's Simple SVG Renderer vulnerable to Stored Cross-Site Scripting (XSS)
Unsecured WMS dynamic styling sld=<url> parameter affords blind unauthenticated SSRF
GeoServer RCE due to improper control of generation of code in jai-ext`Jiffle` map algebra language
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.