pkg:Maven/org.geoserver:gs-main

All known vulnerabilities

• HIGH7.5CVE-2021-40822GeoServer allows SSRF via the option for setting a proxy host
  from 0, <= 2.18.5
• HIGH7.2CVE-2023-41877GeoServer log file path traversal vulnerability
  from 0, <= 2.23.4
• HIGH7.2CVE-2022-24847Improper Input Validation in GeoServer
  >= 2.20.0, < 2.20.4
• MEDIUM6.5GeoServer has a Server-Side Request Forgery (SSRF) Vulnerability in its XML Entity Resolution
  from 0, < 2.26.4
• MEDIUM4.8GeoServer's Style Publisher vulnerable to Stored Cross-Site Scripting (XSS)
  from 0, < 2.23.3
• MEDIUM4.5GeoServer's Server Status shows sensitive environmental variables and Java properties
  >= 2.10.0, < 2.24.4