Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: GeoNode Component: Geonode Clear all filters
TI-2026-28791 CVE-2026-39922 · GHSA-hw9r-6m78-w6h3

GeoNode SSRF via Service Registration

Priority LOW 23

GeoNode versions 4.4.5 and 5.0.2 (and prior within their respective releases) contain a server-side request forgery vulnerability in the service registration endpoint that allows authenticated attackers to trigger outbou…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00175 Published 2026-04-10 Fixed in 4.4.5, 5.0.2 CWE-918
TI-2026-28790 CVE-2026-39921 · GHSA-x87c-g7pw-2xr5

GeoNode < 4.4.5, 5.0.2 SSRF via Document Upload

Priority LOW 23

GeoNode versions 4.0 before 4.4.5 and 5.0 before 5.0.2 contain a server-side request forgery vulnerability that allows authenticated users with document upload permissions to trigger arbitrary outbound HTTP requests by p…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00226 Published 2026-04-10 Fixed in 4.4.5, 5.0.2 CWE-918
TI-2024-17952 CVE-2024-27091 · GHSA-rwcv-whm8-fmxm

GeoNode stored XSS to full account takeover

Priority LOW 27

GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00379 Published 2024-03-27 Fixed in 4.2.3 CWE-79
TI-2023-22605 CVE-2023-42439 · GHSA-pxg5-h34r-7q8p

GeoNode SSRF Bypass to return internal host data

Priority HIGH 72

GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00962 Published 2023-09-15 Fixed in 4.1.3.post1 CWE-918
TI-2023-20907 CVE-2023-40017 · GHSA-rmxg-6qqf-x8mr

Geonode Server Side Request Forgery vulnerability

Priority MEDIUM 40

GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00763 Published 2023-08-24 Fixed in 4.2.0 CWE-918
TI-2023-12986 CVE-2023-28442

Geoserver for GeoNode sensitive information leak

Priority MEDIUM 40

GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0064 Published 2023-03-23 Fixed in 2.20.6, 2.19.6 +1 CWE-200