漏洞描述
SSRF漏洞，即服务器端请求伪造漏洞，是由于服务器端应用程序在处理客户端请求时，未正确验证和过滤URL参数，导致攻击者可以通过构造特定的URL参数，使服务器发起到内部网络或本地的请求。这种漏洞允许攻击者获取内部服务的敏感信息，执行内部网络扫描，甚至可能触发内部服务的漏洞，造成严重的安全威胁。
GeoServer wms 接口存在SSRF漏洞
PoC代码
暂无相关漏洞推荐
- POC CVE-2021-40822: Geoserver - Server-Side Request Forgery
- POC CVE-2022-24816: GeoServer <1.2.2 - Remote Code Execution
- POC CVE-2023-25157: GeoServer OGC Filter - SQL Injection
- POC CVE-2023-43795: GeoServer WPS - Server Side Request Forgery
- POC CVE-2024-29198: GeoServer Demo Request Endpoint - Server Side Request Forgery
- POC CVE-2024-36401: GeoServer RCE in Evaluating Property Name Expressions
- POC CVE-2024-36404: GeoServer and GeoTools - Remote Code Execution
- POC CVE-2025-27505: GeoServer - Missing Authorization on REST API Index
- POC CVE-2025-30220: GeoServer WFS - XXE Processing Vulnerability
- POC CVE-2021-40822: Geoserver - Server-Side Request Forgery
- POC CVE-2022-24816: GeoServer <1.2.2 - Remote Code Execution
- POC CVE-2023-25157: GeoServer OGC Filter - SQL Injection
- POC CVE-2024-36401: GeoServer wfs 远程代码执行漏洞