CVE-2024-29198
Last modified
CVE-2024-29198 is a high-severity vulnerability rated 8.2/10 on the CVSS scale. GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. It possible to achieve Service Side Request Forgery (SSRF) via the Demo request endpoint if Proxy Base URL has not been set. EPSS estimates a 1.92% chance of exploitation in the next 30 days.
Description
GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. It possible to achieve Service Side Request Forgery (SSRF) via the Demo request endpoint if Proxy Base URL has not been set. Upgrading to GeoServer 2.24.4, or 2.25.2, removes the TestWfsPost servlet resolving this issue.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Osgeo | Geoserver | >= 2.0.0, < 2.24.4 |
| Osgeo | Geoserver | >= 2.25.0, < 2.25.2 |
References
- https://github.com/geoserver/geoserver/security/advisories/GHSA-5gw5-jccf-6hxwMitigation, Third Party Advisory
- https://osgeo-org.atlassian.net/browse/GEOS-11390Issue Tracking
- https://osgeo-org.atlassian.net/browse/GEOS-11794Permissions Required
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-29198?
How severe is CVE-2024-29198?
How do I fix CVE-2024-29198?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-29192gotortc is a camera streaming application. Versions 1.8.5 an…8.8
- CVE-2024-29193gotortc is a camera streaming application. Versions 1.8.5 an…6.1
- CVE-2024-29194OneUptime is a solution for monitoring and managing online s…8.3
- CVE-2024-29195The azure-c-shared-utility is a C library for AMQP/MQTT comm…8.1
- CVE-2024-29196phpMyFAQ is an open source FAQ web application for PHP 8.1+ …2.7
- CVE-2024-29197Pimcore is an Open Source Data & Experience Management Platf…6.5
- CVE-2024-29199Nautobot is a Network Source of Truth and Network Automation…5.3
- CVE-2024-2920The WP-Members Membership Plugin plugin for WordPress is vul…5.3
- CVE-2024-29200Kimai is a web-based multi-user time-tracking application. T…6.5
- CVE-2024-29201JumpServer is an open source bastion host and an operation a…9.9
- CVE-2024-29202JumpServer is an open source bastion host and an operation a…9.9
- CVE-2024-29203TinyMCE is an open source rich text editor. A cross-site scr…6.1
Are you affected by CVE-2024-29198?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST