Description
No description available.
GeoServer 未授权 XML外部实体注入(XXE)漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/geoserver/geoserver/security/advisories/GHSA-fjf5-xgmq-5525
https://nvd.nist.gov/vuln/detail/CVE-2025-58360
https://cloud.tencent.com/developer/article/2601739
https://zhuanlan.zhihu.com/p/1977408813893195757
https://www.sentinelone.com/vulnerability-database/cve-2025-58360/
https://motasemhamdan.medium.com/geoservers-2025-xxe-vulnerability-explained-e82caff3a661
https://geoserver.org/announcements/vulnerability/2025/11/25/geoserver-2-28-1-released.html
https://kudelskisecurity.com/research/xml-external-entity-xxe-processing-vulnerability-in-geoserver-wfs-service-cve-2025-30220