GeoNetwork XXE Vulnerability (CVE-2025-30220) Advisory and Fix
Security AdvisoryCVE-2025-30220HighGeoNetwork
Affected:
- org.geonetwork.opensource:gn-web-app >=4.4.0,<=4.4.7
- org.geonetwork.opensource:gn-wfsfeature-harvester >=4.4.0,<=4.4.7
- org.geonetwork.opensource:gn-web-app >=4.2.0,<=4.2.12
- org.geonetwork.opensource:gn-wfsfeature-harvester >=4.2.0,<=4.2.12
Fixed in:
- 4.4.8
- 4.2.13
参照 CVE: CVE-2025-30220 · 9.9 上位 EPSS
文章内图片已隐藏以节省流量 · 升级 Pro 后可见图片及离线存档
本文由本平台从 github.com 自动抓取，经 LLM 流水线清洗、双语翻译。版权归原作者。查看原文。