CVE-2024-34711

GeoServer is an open source server that allows users to share and edit geospatial data. An improper URI validation vulnerability exists that enables an unauthorized attacker to perform XML External Entities (XEE) attack, then send GET request to any HTTP server. By default, GeoServer use PreventLocalEntityResolver class from GeoTools to filter out malicious URIs in XML entities before resolving them. The URI must match the regex (?i)(jar:file|http|vfs)[^?#;]*\\.xsd. But the regex leaves a chance for attackers to request to any HTTP server or limited file. Attacker can abuse this to scan internal networks and gain information about them then exploit further. GeoServer 2.25.0 and greater default to the use of ENTITY_RESOLUTION_ALLOWLIST and does not require you to provide a system property.

• CWE-200
• CWE-611
• CWE-918

• https://docs.geoserver.org/latest/en/user/production/config.html#production-config-external-entitiesProduct
• https://github.com/geoserver/geoserver/security/advisories/GHSA-mc43-4fqr-c965Mitigation, Third Party Advisory

Published

Jun 10, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-34706Valtimo is an open source business process and case manageme…9.8
• CVE-2024-34707Nautobot is a Network Source of Truth and Network Automation…4.8
• CVE-2024-34708Directus is a real-time API and App dashboard for managing S…4.9
• CVE-2024-34709Directus is a real-time API and App dashboard for managing S…5.4
• CVE-2024-3471The Button Generator WordPress plugin before 3.0 does not h…3.4
• CVE-2024-34710Wiki.js is al wiki app built on Node.js. Client side templat…7.1
• CVE-2024-34712Oceanic is a NodeJS library for interfacing with Discord. Pr…6.5
• CVE-2024-34713sshproxy is used on a gateway to transparently proxy a user …3.5
• CVE-2024-34714The Hoppscotch Browser Extension is a browser extension for …7.6
• CVE-2024-34715Fides is an open-source privacy engineering platform. The Fi…3.3
• CVE-2024-34716PrestaShop is an open source e-commerce web application. A c…6.1
• CVE-2024-34717PrestaShop is an open source e-commerce web application. In …5.3