GeoServer CVE-2025-27505: REST API Index Authorization Bypass

github.com 2025-06-12查看中文 →

Security AdvisoryCVE-2025-27505MediumGeoServer

Affected:

org.geoserver.web:gs-web-app >=2.26.0, <2.26.3
org.geoserver.web:gs-web-app <2.25.6
org.geoserver:gs-rest >=2.26.0, <2.26.3
org.geoserver:gs-rest <2.25.6

Fixed in:

2.26.3
2.25.6

Referenced CVEs: CVE-2025-27505 · 5.3

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Git v6.0.0-alpha.5 Worktree Symlink Path Validation Bypass 2026-08-08 go-git Symlink Traversal Vulnerability Advisory (CVE-2026-71556) 2026-08-08 Fix: Reject path traversal in go-git reference names (GHSA-qgq7-7hm3-q39j) 2026-08-08 Git Path Traversal Vulnerability Analysis and Fix via IsSafe Validation 2026-08-08 go-git Reference Name Validation Flaw Leads to Path Traversal 2026-08-08

Offline Archive

Offline screenshot & PDF are Pro-exclusive