[Loki]

GeoServer is an open-source Java-based software server that enables users to view, edit, and share geospatial data. It offers a versatile and efficient solution for distributing geospatial information from various sources such as GIS databases, web-based data, and personal datasets.

In versions of GeoServer earlier than 2.23.2, 2.23.6, versions 2.24.0 to 2.24.3, and version 2.25.0, there exists a vulnerability (CVE-2024-36401) that permits Remote Code Execution (RCE) by unauthenticated users. This issue arises from the unsafe evaluation of property names as XPath expressions in multiple OGC request parameters.

Exploiting this vulnerability, an attacker can send a POST request containing a malicious XPath expression, which can result in arbitrary command execution as root on the system running GeoServer.

Hidden Content

You must register or login to view this content.

[PangPang]

How do you find the vulnerable websites? I cant find any.


Edit: dork is provided

[louna]

Edit: dork is provided

[Loki]

A month ago, you're kidding me

https://github.com/Chocapikk/CVE-2024-36401

what are you on about?

and why are you posting a hidden link as the reply?

[KhanMahammad]

2222222222222222222222222222222

[Saury404]

Thank you, this is a very useful thing for my learning

[un1dentif1ed]

nice! need to check it out

This forum account is currently banned. Ban Length: (Permanent)
Ban Reason: Scraping | https://breachforums.hn/Forum-Ban-Appeals if you feel this is incorrect.

[fankflash]

Thank you, this is a very useful

[Swiptt]

GeoServer is an open-source Java-based software server that enables users to view, edit, and share geospatial data. It offers a versatile and efficient solution for distributing geospatial information from various sources such as GIS databases, web-based data, and personal datasets.

In versions of GeoServer earlier than 2.23.2, 2.23.6, versions 2.24.0 to 2.24.3, and version 2.25.0, there exists a vulnerability (CVE-2024-36401) that permits Remote Code Execution (RCE) by unauthenticated users. This issue arises from the unsafe evaluation of property names as XPath expressions in multiple OGC request parameters.

Exploiting this vulnerability, an attacker can send a POST request containing a malicious XPath expression, which can result in arbitrary command execution as root on the system running GeoServer.

This file is amazing thank for sharing bro

[seraph8]

Someone should make this into a spiderfoot module to scan the net efficiently for vuln server