geosolutionsgroup kayıtları
geosolutionsgroup üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 1 · %12,5
- Silahlaştırılmış
- 1 · %12,5
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %87,5
- Yayından KEV’e ortanca
- 805 gün
Tekrar eden sınıflar
- CWE-918 Server-Side Request Forgery (SSRF)4
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-611 Improper Restriction of XML External Entity Reference1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
100Hemen | CVE-2022-24816Silahlaştırılmış | Improper Control of Generation of Code in jai-extgeosolutionsgroup · jai-ext · CWE-94 | Kritik10,0 | KEV | %99,9 | 13 Nis 2022 |
30İzleyin | CVE-2023-40017İstismar yok | Geonode Server Side Request Forgery vulnerabilitygeosolutionsgroup · geonode · CWE-918 | Yüksek7,5 | — | %0,8 | 24 Ağu 2023 |
26İzleyin | CVE-2023-42439İstismar yok | GeoNode SSRF Bypass to return internal host datageosolutionsgroup · geonode · CWE-918 | Orta6,5 | — | %1,0 | 15 Eyl 2023 |
26İzleyin | CVE-2023-26043İstismar yok | XML External Entity (XXE) injection in GeoServer style upload functionalitygeosolutionsgroup · geonode · CWE-611 | Orta6,5 | — | %0,8 | 27 Şub 2023 |
24İzleyin | CVE-2024-27091İstismar yok | GeoNode stored XSS to full account takeovergeosolutionsgroup · geonode · CWE-79 | Orta6,1 | — | %0,4 | 27 Mar 2024 |
21İzleyin | CVE-2023-28442İstismar yok | Geoserver for GeoNode sensitive information leakgeosolutionsgroup · geonode · CWE-200 | Orta5,3 | — | %0,6 | 23 Mar 2023 |
21İzleyin | CVE-2026-39921İstismar yok | GeoNode < 4.4.5, 5.0.2 SSRF via Document Uploadgeosolutionsgroup · geonode · CWE-918 | Orta5,3 | — | %0,4 | 10 Nis 2026 |
21İzleyin | CVE-2026-39922İstismar yok | GeoNode SSRF via Service Registrationgeosolutionsgroup · geonode · CWE-918 | Orta5,3 | — | %0,3 | 10 Nis 2026 |
- CVE-2022-24816100Hemen
Improper Control of Generation of Code in jai-ext
KritikCVSS 10,0KEVSilahlaştırılmışEPSS %100geosolutionsgroup · jai-ext13 Nis 2022
- CVE-2023-4001730İzleyin
Geonode Server Side Request Forgery vulnerability
YüksekCVSS 7,5İstismar yokEPSS %1geosolutionsgroup · geonode24 Ağu 2023
- CVE-2023-4243926İzleyin
GeoNode SSRF Bypass to return internal host data
OrtaCVSS 6,5İstismar yokEPSS %1geosolutionsgroup · geonode15 Eyl 2023
- CVE-2023-2604326İzleyin
XML External Entity (XXE) injection in GeoServer style upload functionality
OrtaCVSS 6,5İstismar yokEPSS %1geosolutionsgroup · geonode27 Şub 2023
- CVE-2024-2709124İzleyin
GeoNode stored XSS to full account takeover
OrtaCVSS 6,1İstismar yokEPSS %0geosolutionsgroup · geonode27 Mar 2024
- CVE-2023-2844221İzleyin
Geoserver for GeoNode sensitive information leak
OrtaCVSS 5,3İstismar yokEPSS %1geosolutionsgroup · geonode23 Mar 2023
- CVE-2026-3992121İzleyin
GeoNode < 4.4.5, 5.0.2 SSRF via Document Upload
OrtaCVSS 5,3İstismar yokEPSS %0geosolutionsgroup · geonode10 Nis 2026
- CVE-2026-3992221İzleyin
GeoNode SSRF via Service Registration
OrtaCVSS 5,3İstismar yokEPSS %0geosolutionsgroup · geonode10 Nis 2026