First published: Sun May 01 2022(Updated: )
GeoServer through 2.18.5 and 2.19.x through 2.19.2 allows SSRF via the option for setting a proxy host.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
OSGeo GeoServer | <=2.18.5 | |
OSGeo GeoServer | >=2.19.0<2.19.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this vulnerability is CVE-2021-40822.
The severity of CVE-2021-40822 is high with a score of 7.5.
Versions 2.18.5 and 2.19.0 through 2.19.2 of GeoServer are affected by CVE-2021-40822.
CVE-2021-40822 is a Server Side Request Forgery (SSRF) vulnerability in GeoServer that allows SSRF via the option for setting a proxy host.
To fix CVE-2021-40822, upgrade GeoServer to version 2.19.3 or later.