GeoTools XXE Vulnerability (CVE-2025-30220) in XSD Schema Handling

github.com 2025-06-11查看中文 →

Security AdvisoryCVE-2025-30220CriticalGeoTools

Affected:

org.geotools:gt-wfs-ng =33.0
org.geotools:gt-wfs-ng >=32.0
org.geotools:gt-wfs-ng >=29.0<=31.6
org.geotools:gt-wfs-ng <28.6.1
org.geotools:gt-xsd-core =33.0

Fixed in:

org.geotools:gt-wfs-ng 33.1
org.geotools:gt-wfs-ng 32.3
org.geotools:gt-wfs-ng 31.7
org.geotools:gt-wfs-ng 28.6.1
org.geotools:gt-xsd-core 33.1

Referenced CVEs: CVE-2025-30220 · 9.9 Top EPSS

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

SSRF Vulnerability in PhialsBasement/KoboldCPP-MCP-Server via apiUrl with PoC 2026-08-10 Arbitrary Local File Read in Handwriting-OCR MCP Server via upload_document 2026-08-10 Arbitrary Local File Read in Nikolaibibo/claude-comfyui-mcp comfy_upload_image tool 2026-08-10 Arbitrary File Read/Write via Session Path in bartekke8it56w2/new-mcp (PoC) 2026-08-10 jira-mcp-server add_attachment_from_public_url SSRF Vulnerability 2026-08-10

Offline Archive

Offline screenshot & PDF are Pro-exclusive