Description
GeoServer REST API 小于 2.25.6 版本和 2.26.0 到 2.26.3 版本，存在未授权访问漏洞，攻击者可以利用该漏洞获取大量敏感信息，以供下一步的攻击使用。
GeoServer REST API 存在未授权访问漏洞(CVE-2025-27505)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-27505
https://github.com/geoserver/geoserver/security/advisories/GHSA-h86g-x8mm-78m5
https://geoserver.org/announcements/vulnerability/2025/05/13/geoserver-2-26-3-released.html
https://cn-sec.com/archives/4314098.html
https://ddpoc.com/DVB-2025-9639.html
https://www.miggo.io/vulnerability-database/cve/CVE-2025-27505
https://access.redhat.com/security/cve/cve-2025-27505