OSGeo GeoServer RCE (CVE-2024-36401)

Language:

Version 1.4 Oct 6, 2025, 9:07 AM Exploit attributes ("Exploit framework core" set to "True") Plugin Feed: 202510060907
Version 1.3 Oct 7, 2024, 1:27 PM Plugin categorization (adding new 'component' to component plugins) Plugin Feed: 202410071327
Version 1.2 Aug 3, 2024, 3:25 PM Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" set to "Exploits are available") Exploit attributes ("Exploit framework metasploit" set to "True") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C") CISA reference Plugin Feed: 202408031525
Version 1.1 Aug 2, 2024, 5:39 PM New Plugin Feed: 202408021739

* Changelogs are generally available for changes made after Nov 1, 2022