org.geoserver:gs-wms vulnerabilities (Maven)
9 vulnerabilities.
org.geoserver:gs-wmsMavenGeoServer has a Server-Side Template Injection (SSTI) vulnerability in processing FreeMarker templates7.2 Highorg.geoserver:gs-wmsMavenGeoServer is vulnerable to an Unauthenticated XML External Entities (XXE) attack via WMS GetMap feature8.2 Highorg.geoserver:gs-wmsMavenGeoServer Reflected Cross-Site Scripting (XSS) vulnerability in WMS GetFeatureInfo HTML format6.1 Mediumorg.geoserver:gs-wmsMavenGeoServer has an Infinite Loop Vulnerability in Jiffle process7.5 Highorg.geoserver:gs-wmsMavenRemote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver9.8 Criticalorg.geoserver:gs-wmsMavenGeoServer Stored Cross-Site Scripting (XSS) vulnerability in WMS OpenLayers Format4.8 Mediumorg.geoserver:gs-wmsMavenGeoServer Stored Cross-Site Scripting (XSS) vulnerability in Simple SVG Renderer4.8 Mediumorg.geoserver:gs-wmsMavenUnsecured WMS dynamic styling sld=<url> parameter affords blind unauthenticated SSRF in GeoServer8.6 Highorg.geoserver:gs-wmsMavenGeoServer RCE due to improper control of generation of code in jai-ext`Jiffle` map algebra language9.8 Critical