CVE-2023-25158

GeoServer OGC Filter SQL Injection (CVE-2023-25157) 中文版本(Chinese version) GeoServer is an open-source software server written in Java that provides the ability to view, edit, and share geospatial data It is designed to be a flexible, efficient solution for distributing geospatial data from a variety of sources such as Geographic Information System (GIS) databases, web-

Geoserver SQL Injection Exploit

Geoserver SQL Injection Exploit In this year, a cve got published for Geoserver with the ID CVE-2023-25157 I saw this vulnerability in one of my projects and tried to exploit it And here it is, the complete exploit In this repo(githubcom/0x2458bughunt/CVE-2023-25157) you can use the detector to find out what tergets have the technology and vulnerability After usi

Geoserver SQL Injection Exploit

Geoserver SQL Injection Exploit In this year, a cve got published for Geoserver with the ID CVE-2023-25157 I saw this vulnerability in one of my projects and tried to exploit it And here it is, the complete exploit In this repo(githubcom/0x2458bughunt/CVE-2023-25157) you can use the detector to find out what tergets have the technology and vulnerability After usi

GeoServer & GeoTools SQL Injection (CVE-2023-25157 & CVE-2023-25158)

GeoServer & GeoTools SQL Injection (CVE-2023-25157 & CVE-2023-25158) This repository contains a detailed description and replication steps of the SQL Injection vulnerabilities found in the GeoServer platform and GeoTools Library The vulnerability has been assigned the identifier CVE-2023-25157 for GeoServer and CVE-2023-25158 for GeoTools GeoServer is an open