According to its banner, the version of GeoServer running on the remote host is prior to 2.23.5 or 2.24.0 prior to 2.24.2. It is, therefore, affected by Multiples Vulnerabilities :

- An Arbitrary file upload vulnerability in REST Coverage Store API - A Stored Cross-Site Scripting (XSS) vulnerability in GWC Seed Form - A Stored Cross-Site Scripting (XSS) vulnerability in GWC Demos Page - A Stored Cross-Site Scripting (XSS) vulnerability in MapML HTML Page - A Stored Cross-Site Scripting (XSS) vulnerability in WMS OpenLayers Format - A Stored Cross-Site Scripting (XSS) vulnerability in Simple SVG Renderer

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
114534	GeoServer < 2.23.4 Multiples Vulnerabilities	Web App Scanning	Component Vulnerability	12/10/2024	12/10/2024	high
114535	GeoServer 2.24.0 < 2.24.1 Multiples Vulnerabilities	Web App Scanning	Component Vulnerability	12/10/2024	12/10/2024	high

Detections

Analytics

Plugins Search

high

high