org.geoserver.web:gs-web-app vulnerabilities

CVEs whose affected-version data names the org.geoserver.web:gs-web-app package (maven). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2024-45747High· 7.2

GeoServer has a Server-Side Template Injection (SSTI) vulnerability in processing FreeMarker templates

GeoServer has a Server-Side Template Injection (SSTI) vulnerability in processing FreeMarker templates

▾ Twilightgeoserver · org.geoserver:gs-mainvia GHSA

org.geoserver.web:gs-web-app vulnerabilities (CVEs) · VulnSea