org.geoserver.web:gs-web-app (Maven) — known CVEs & security advisories
Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package org.geoserver.web:gs-web-app, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.
CVEs (15)
CVE-2025-30220 — CVSS 9.9 (critical): GeoServer is an open source server that allows users to share and edit geospatial data. GeoTools Schema class use of Eclipse XSD library to…
CVE-2024-34711 — CVSS 9.3 (critical): GeoServer is an open source server that allows users to share and edit geospatial data. An improper URI validation vulnerability exists…
CVE-2023-41339 — CVSS 8.6 (high): GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. The WMS specification…
CVE-2024-24749 — CVSS 7.5 (high): GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.23.5 and 2.24.3, if GeoServer…
CVE-2025-30145 — CVSS 7.5 (high): GeoServer is an open source server that allows users to share and edit geospatial data. Malicious Jiffle scripts can be executed by…
CVE-2025-52465 — CVSS 7.2 (high): GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.26.4 and 2.27.3, a…
CVE-2025-58175 — CVSS 6.5 (medium): GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.26.4 and 2.27.3, a GeoServer…
CVE-2025-21621 — CVSS 6.1 (medium): GeoServer is an open source server that allows users to share and edit geospatial data. Prior to version 2.25.0, a reflected cross-site…
CVE-2024-40625 — CVSS 5.5 (medium): GeoServer is an open source server that allows users to share and edit geospatial data. The Coverage rest api /workspaces/{workspaceName}/co…
CVE-2024-38524 — CVSS 5.3 (medium): GeoServer is an open source server that allows users to share and edit geospatial data. org.geowebcache.GeoWebCacheDispatcher.handleFrontPag…
CVE-2025-27505 — CVSS 5.3 (medium): GeoServer is an open source server that allows users to share and edit geospatial data. It is possible to bypass the default REST API…
CVE-2024-35230 — CVSS 5.3 (medium): GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. In affected versions the…
CVE-2024-34696 — CVSS 4.5 (medium): GeoServer is an open source server that allows users to share and edit geospatial data. Starting in version 2.10.0 and prior to versions…