Read the docs

GeoNode

Records11All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

GeoNode records in CISA KEV
TI-2022-08629 OSGeo GeoServer JAI-EXT Code Injection Vulnerability Priority CRITICAL 100KEV 2024-06-26

Components

Products in the NVD configurations · select one to filter the records
Geonode 7 records HIGH Jai-ext 1 record CRITICAL

Records

7 records in Geonode · all components

TI-2023-22605 CVE-2023-42439 · GHSA-pxg5-h34r-7q8p

GeoNode SSRF Bypass to return internal host data

Priority HIGH 72

GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00962 Published 2023-09-15 Fixed in 4.1.3.post1 CWE-918
TI-2023-20907 CVE-2023-40017 · GHSA-rmxg-6qqf-x8mr

Geonode Server Side Request Forgery vulnerability

Priority MEDIUM 40

GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00763 Published 2023-08-24 Fixed in 4.2.0 CWE-918
TI-2023-12986 CVE-2023-28442

Geoserver for GeoNode sensitive information leak

Priority MEDIUM 40

GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0064 Published 2023-03-23 Fixed in 2.20.6, 2.19.6 +1 CWE-200
TI-2024-17952 CVE-2024-27091 · GHSA-rwcv-whm8-fmxm

GeoNode stored XSS to full account takeover

Priority LOW 27

GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00379 Published 2024-03-27 Fixed in 4.2.3 CWE-79
TI-2026-28791 CVE-2026-39922 · GHSA-hw9r-6m78-w6h3

GeoNode SSRF via Service Registration

Priority LOW 23

GeoNode versions 4.4.5 and 5.0.2 (and prior within their respective releases) contain a server-side request forgery vulnerability in the service registration endpoint that allows authenticated attackers to trigger outbou…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00175 Published 2026-04-10 Fixed in 4.4.5, 5.0.2 CWE-918
TI-2026-28790 CVE-2026-39921 · GHSA-x87c-g7pw-2xr5

GeoNode < 4.4.5, 5.0.2 SSRF via Document Upload

Priority LOW 23

GeoNode versions 4.0 before 4.4.5 and 5.0 before 5.0.2 contain a server-side request forgery vulnerability that allows authenticated users with document upload permissions to trigger arbitrary outbound HTTP requests by p…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00226 Published 2026-04-10 Fixed in 4.4.5, 5.0.2 CWE-918
Open these records in search →