【Vulnerability Alert】High-Risk Security Vulnerability in GeoServer's Open Source Project JAI-EXT (CVE-2022-24816) – Immediate Update Required!
publish date :
2024-07-08
update date :
2024-07-08
Source: Ministry of education information & communication security contingency platform
| Publication Number | TACERT-ANA-2024070503075555 | Publication Time | 2024/07/05 15:07 |
| Incident Type | ANA-Vulnerability Alert | Discovery Time | 2024/07/05 15:07 |
| Impact Level | Medium | ||
| [Subject] 【Vulnerability Alert】High-Risk Security Vulnerability in GeoServer's Open Source Project JAI-EXT (CVE-2022-24816) – Immediate Update Required! |
|||
| [Content] Forwarded from the National Institute of Cyber Security NISAC-200-202407-00000095 Researchers have discovered a code injection vulnerability (CVE-2022-24816) in the jt-jiffle package of GeoServer's open source project JAI-EXT. Remote attackers without authentication can exploit this vulnerability to execute arbitrary code remotely. This vulnerability has been exploited by hackers, please verify and patch immediately. Information Sharing Level: WHITE (Information content can be publicly disclosed) |
|||
| [Affected Platform] jt-jiffle package versions earlier than 1.1.22 |
|||
| [Recommended Actions] The official patch for this vulnerability has been released. Please refer to the following URL for the patch: https://github.com/geosolutions-it/jai-ext/security/advisories/GHSA-v92f-jx6p-73rx |
|||
| [Reference] 1. https://nvd.nist.gov/vuln/detail/CVE-2022-24816 2. https://github.com/geosolutions-it/jai-ext/security/advisories/GHSA-v92f-jx6p-73rx 3. https://github.com/geosolutions-it/jai-ext/commit/cb1d6565d38954676b0a366da4f965fef38da1cb |
|||
(This notification is for informational purposes only and does not constitute a cybersecurity incident).
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw
Organizer:
Computer Center
