CVE-2023-35042 |
Description: GeoServer 2, in some configurations, allows remote attackers to execute arbitrary code via java.lang.Runtime.getRuntime().exec in wps:LiteralData within a wps:Execute request, as exploited in the wild in June 2023. NOTE: the vendor states that they are unable to reproduce this in any version.
CVSS: LOW (0.0) EPSS Score: 0.53%
November 28th, 2024 (6 months ago)
|
CVE-2023-34937 |
|
CVE-2023-34936 |
|
CVE-2023-34934 |
|
CVE-2023-34933 |
|
CVE-2023-34932 |
|
CVE-2023-34931 |
|
CVE-2023-34930 |
|
CVE-2023-34929 |
|
CVE-2023-34928 |
|