CVE-2024-29198

HIGH EXPLOITED NUCLEI

GeoServer Demo Request Endpoint - Server Side Request Forgery

Title source: nuclei

Description

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. It possible to achieve Service Side Request Forgery (SSRF) via the Demo request endpoint if Proxy Base URL has not been set. Upgrading to GeoServer 2.24.4, or 2.25.2, removes the TestWfsPost servlet resolving this issue.

Nuclei Templates (1)

GeoServer Demo Request Endpoint - Server Side Request Forgery
HIGHVERIFIEDby iamnoooob,pdresearch
Shodan: http.title:"geoserver" || server:"geohttpserver"
FOFA: app="geoserver" || title="geoserver"

References (3)

Scores

CVSS v3 7.5
EPSS 0.1036
EPSS Percentile 93.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

VulnCheck KEV 2025-07-31
CWE
CWE-918
Status published
Products (3)
org.geoserver/gs-wfs 2.0.0 - 2.24.4Maven
org.geoserver.web/gs-app 2.0.0 - 2.24.4Maven
osgeo/geoserver 2.0.0 - 2.24.4
Published Jun 10, 2025
Tracked Since Feb 18, 2026