GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. The OGC Web Processing Service (WPS) specification is designed to process information from any server using GET and POST requests. This presents the opportunity for Server Side Request Forgery. This vulnerability has been patched in version 2.22.5 and 2.23.2.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - GeoServer is an open source software server written in Java that allows users to share and edit geospatial
    data. The OGC Web Processing Service (WPS) specification is designed to process information from any
    server using GET and POST requests. This presents the opportunity for Server Side Request Forgery. This
    vulnerability has been patched in version 2.22.5 and 2.23.2. (CVE-2023-43795)

According to its banner, the version of GeoServer running on the remote host is prior to 2.22.5 or 2.23.0 < 2.23.2. It is, therefore, affected by Multiples Vulnerabilities :

- A Server Side Request Forgery in Web Processing Service (WPS) - A Server Side Request Forgery in the dynamic styling sld=<url> parameter

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
410963	SCA: security update for org.geoserver.extension:gs-wps-core (GHSA-5pr3-m5hm-9956)	Tenable Cloud Security	SCA Checks	Local	critical
410963	SCA: security update for org.geoserver.extension:gs-wps-core (GHSA-5pr3-m5hm-9956)	Tenable Self-Hosted Container Security	SCA Checks	Local	critical
114539	GeoServer 2.23.0 < 2.23.1 Multiples Vulnerabilities	Web App Scanning	Component Vulnerability	Version Based	critical
114538	GeoServer < 2.22.5 Multiples Vulnerabilities	Web App Scanning	Component Vulnerability	Version Based	critical

Detections

Analytics

CVE-2023-43795

critical

Tenable Plugins

critical

critical

critical

critical