SecurityInternet3 days ago
Unpatched GeoServer Zero-Day Exploited for RCE
1 min read
A newly disclosed GeoServer SQL injection zero-day is under active exploitation, enabling remote code execution. The flaw, disclosed August 12 by @q1uf3ng, remains unpatched. GeoServer released versions 3.0.1, 2.28.5, and 2.27.6 to fix it, assigning GHSA-mqjf-5f49-2fjh with a CVSS score of 9.8.
Level
Hype check
Tap to vote and see what everyone thinks.
