【Vulnerability Alert】High-Risk Security Vulnerability in GeoServer (CVE-2024-36401) – Immediate Update Required!
publish date :
2024-07-08
update date :
2024-07-08
Source: Ministry of education information & communication security contingency platform
| Publication Number | TACERT-ANA-2024070503071313 | Publication Time | 2024/07/05 15:00 |
| Incident Type | ANA-Vulnerability Alert | Discovery Time | 2024/07/05 15:00 |
| Impact Level | Medium | ||
| [Subject] 【Vulnerability Alert】High-Risk Security Vulnerability in GeoServer (CVE-2024-36401) – Immediate Update Required! |
|||
| [Content] Forwarded from the National Institute of Cyber Security NISAC-200-202407-00000043 Researchers have discovered a code injection vulnerability (CVE-2024-36401) in GeoServer. Remote attackers without authentication can exploit this vulnerability to execute arbitrary code remotely. A proof of concept (PoC) for this vulnerability has been made public. Please verify and patch immediately. Information Sharing Level: WHITE (Information content can be publicly disclosed) |
|||
| [Affected Platform] ●GeoServer versions earlier than 2.23.6 ●GeoServer versions 2.24.0 to 2.24.4 (exclusive) ●GeoServer versions 2.25.0 to 2.25.2 (exclusive) |
|||
| [Recommended Actions] The official patch for this vulnerability has been released. Please refer to the following URL for the patch: https://github.com/advisories/GHSA-6jj6-gm7p-fcvv |
|||
| [Reference] 1. https://nvd.nist.gov/vuln/detail/CVE-2024-36401 2. https://github.com/advisories/GHSA-6jj6-gm7p-fcvv |
|||
(This notification is for informational purposes only and does not constitute a cybersecurity incident).
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw
Organizer:
Computer Center
