Read the docs

GeoNode

Records11All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

GeoNode records in CISA KEV
TI-2022-08629 OSGeo GeoServer JAI-EXT Code Injection Vulnerability Priority CRITICAL 100KEV 2024-06-26

Components

Products in the NVD configurations · select one to filter the records
Geonode 7 records HIGH Jai-ext 1 record CRITICAL

Records

11 records

TI-2022-08629 CVE-2022-24816 · GHSA-v92f-jx6p-73rx

Improper Control of Generation of Code in jai-ext

Priority CRITICAL 100KEV

JAI-EXT is an open-source project which aims to extend the Java Advanced Imaging (JAI) API.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.99929 Published 2022-04-13 Fixed in 1.1.22 CWE-94
TI-2023-22605 CVE-2023-42439 · GHSA-pxg5-h34r-7q8p

GeoNode SSRF Bypass to return internal host data

Priority HIGH 72

GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00962 Published 2023-09-15 Fixed in 4.1.3.post1 CWE-918
TI-2023-20907 CVE-2023-40017 · GHSA-rmxg-6qqf-x8mr

Geonode Server Side Request Forgery vulnerability

Priority MEDIUM 40

GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00763 Published 2023-08-24 Fixed in 4.2.0 CWE-918
TI-2023-12986 CVE-2023-28442

Geoserver for GeoNode sensitive information leak

Priority MEDIUM 40

GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0064 Published 2023-03-23 Fixed in 2.20.6, 2.19.6 +1 CWE-200
TI-2026-86101 CVE-2026-55649 · GHSA-r4hm-p9f9-fj9v

Stored XSS in GeoNode Documents metadata abstract field

Priority LOW 28

GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data.

CVSS 3.1MEDIUM 6.3 Network Low privileges User interaction EPSS 0.00317 Published 2026-11-06 Fixed in 5.0.3 CWE-79
TI-2024-17952 CVE-2024-27091 · GHSA-rwcv-whm8-fmxm

GeoNode stored XSS to full account takeover

Priority LOW 27

GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00379 Published 2024-03-27 Fixed in 4.2.3 CWE-79
TI-2026-86096 CVE-2026-46429 · GHSA-fqpv-mq26-pr4j

GeoNode: Unrestricted File Upload

Priority LOW 24

GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data.

CVSS 3.1MEDIUM 5.5 Network Low privileges User interaction EPSS 0.00261 Published 2026-11-06 Fixed in 5.0.3 CWE-434
TI-2026-28791 CVE-2026-39922 · GHSA-hw9r-6m78-w6h3

GeoNode SSRF via Service Registration

Priority LOW 23

GeoNode versions 4.4.5 and 5.0.2 (and prior within their respective releases) contain a server-side request forgery vulnerability in the service registration endpoint that allows authenticated attackers to trigger outbou…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00175 Published 2026-04-10 Fixed in 4.4.5, 5.0.2 CWE-918
TI-2026-28790 CVE-2026-39921 · GHSA-x87c-g7pw-2xr5

GeoNode < 4.4.5, 5.0.2 SSRF via Document Upload

Priority LOW 23

GeoNode versions 4.0 before 4.4.5 and 5.0 before 5.0.2 contain a server-side request forgery vulnerability that allows authenticated users with document upload permissions to trigger arbitrary outbound HTTP requests by p…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00226 Published 2026-04-10 Fixed in 4.4.5, 5.0.2 CWE-918
Open these records in search →