Vulnerability · Published Mar 20, 2024 · Assigned by GitHub_M

CVE-2024-23643GeoServer Stored Cross-Site Scripting (XSS) vulnerability in GWC Seed Form

Medium 4.8

In plain English

A medium-severity cross-site scripting in geoserver from geoserver. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 37% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)4.8Medium

Exploit odds (30 days)0.4%top 62.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 2.23.2 and 2.24.1 that enables an authenticated administrator with workspace-level privileges to store a JavaScript payload in the GeoServer catalog that will execute in the context of another administrator’s browser when viewed in the GWC Seed Form. Access to the GWC Seed Form is limited to full administrators by default and granting non-administrators access to this endpoint is not recommended. Versions 2.23.2 and 2.24.1 contain a fix for this issue.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Maven	org.geoserver:gs-gwc-rest	2.23.2	GHSA-56r3-f536-5gf7
Maven	org.geoserver:gs-gwc-rest	2.24.1	GHSA-56r3-f536-5gf7

Affected products (as reported)

Vendor	Product	Versions
geoserver	geoserver	< 2.23.2= 2.24.0

Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

References

https://github.com/geoserver/geoserver/security/advisories/GHSA-56r3-f536-5gf7 x_refsource_CONFIRM
https://github.com/GeoWebCache/geowebcache/issues/1172 x_refsource_MISC
https://github.com/GeoWebCache/geowebcache/pull/1174 x_refsource_MISC
https://github.com/GeoWebCache/geowebcache/commit/9d010e09c784690ada8af43f594461a2553a62f0 x_refsource_MISC