https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-21621.htmlhttps://patchthecve.com/cve/CVE-2025-21621.htmlSun, 18 Oct 2026 20:10:00 +0000MEDIUM 6.1: GeoServer is an open source server that allows users to share and edit geospatial data. Prior to version 2.25.0, a reflected cross-site scripting (XSS) vulnerability exists in the WMS GetFeatureInfo HTML output format that enables a remote attacker to execute arbitrary JavaScript code in a victim's https://patchthecve.com/cve/CVE-2025-58360.htmlhttps://patchthecve.com/cve/CVE-2025-58360.htmlSun, 18 Oct 2026 20:10:00 +0000HIGH 8.2: GeoServer is an open source server that allows users to share and edit geospatial data. From version 2.26.0 to before 2.26.2 and before 2.25.6, an XML External Entity (XXE) vulnerability was identified. The application accepts XML input through a specific endpoint /geoserver/wms operation GetMap. Hohttps://patchthecve.com/cve/CVE-2024-36401.htmlhttps://patchthecve.com/cve/CVE-2024-36401.htmlWed, 17 Jun 2026 07:36:38 +0000CRITICAL 9.8: GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.22.6, 2.23.6, 2.24.4, and 2.25.2, multiple OGC request parameters allow Remote Code Execution (RCE) by unauthenticated users through specially crafted input against a default GeoServer installhttps://patchthecve.com/cve/CVE-2024-34696.htmlhttps://patchthecve.com/cve/CVE-2024-34696.htmlWed, 17 Jun 2026 07:33:53 +0000MEDIUM 4.5: GeoServer is an open source server that allows users to share and edit geospatial data. Starting in version 2.10.0 and prior to versions 2.24.4 and 2.25.1, GeoServer's Server Status page and REST API lists all environment variables and Java properties to any GeoServer user with administrative rightshttps://patchthecve.com/cve/CVE-2024-24749.htmlhttps://patchthecve.com/cve/CVE-2024-24749.htmlWed, 17 Jun 2026 07:14:46 +0000HIGH 7.5: GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.23.5 and 2.24.3, if GeoServer is deployed in the Windows operating system using an Apache Tomcat web application server, it is possible to bypass existing input validation in the GeoWebCache Bhttps://patchthecve.com/cve/CVE-2024-23821.htmlhttps://patchthecve.com/cve/CVE-2024-23821.htmlWed, 17 Jun 2026 07:13:40 +0000MEDIUM 4.8: GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 2.23.4 and 2.24.1 that enables an authenticated administrator with workspace-level privileges to store a Javahttps://patchthecve.com/cve/CVE-2024-23819.htmlhttps://patchthecve.com/cve/CVE-2024-23819.htmlWed, 17 Jun 2026 07:13:40 +0000MEDIUM 4.8: GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 2.23.4 and 2.24.1 that enables an authenticated administrator with workspace-level privileges to store a Javahttps://patchthecve.com/cve/CVE-2024-23818.htmlhttps://patchthecve.com/cve/CVE-2024-23818.htmlWed, 17 Jun 2026 07:13:40 +0000MEDIUM 4.8: GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 2.23.3 and 2.24.1 that enables an authenticated administrator with workspace-level privileges to store a Javahttps://patchthecve.com/cve/CVE-2024-23643.htmlhttps://patchthecve.com/cve/CVE-2024-23643.htmlWed, 17 Jun 2026 07:13:17 +0000MEDIUM 4.8: GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 2.23.2 and 2.24.1 that enables an authenticated administrator with workspace-level privileges to store a Javahttps://patchthecve.com/cve/CVE-2024-23642.htmlhttps://patchthecve.com/cve/CVE-2024-23642.htmlWed, 17 Jun 2026 07:13:17 +0000MEDIUM 4.8: GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 2.23.4 and 2.24.1 that enables an authenticated administrator with workspace-level privileges to store a Javahttps://patchthecve.com/cve/CVE-2024-23640.htmlhttps://patchthecve.com/cve/CVE-2024-23640.htmlWed, 17 Jun 2026 07:13:17 +0000MEDIUM 4.8: GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 2.23.3 and 2.24.0 that enables an authenticated administrator with workspace-level privileges to store a Javahttps://patchthecve.com/cve/CVE-2024-23634.htmlhttps://patchthecve.com/cve/CVE-2024-23634.htmlWed, 17 Jun 2026 07:13:16 +0000MEDIUM 6.0: GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. An arbitrary file renaming vulnerability exists in versions prior to 2.23.5 and 2.24.2 that enables an authenticated administrator with permissions to modify stores through the REST Coverhttps://patchthecve.com/cve/CVE-2023-51445.htmlhttps://patchthecve.com/cve/CVE-2023-51445.htmlWed, 17 Jun 2026 06:40:58 +0000MEDIUM 4.8: GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 2.23.3 and 2.24.0 that enables an authenticated administrator with workspace-level privileges to store a Javahttps://patchthecve.com/cve/CVE-2023-51444.htmlhttps://patchthecve.com/cve/CVE-2023-51444.htmlWed, 17 Jun 2026 06:40:58 +0000HIGH 7.2: GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. An arbitrary file upload vulnerability exists in versions prior to 2.23.4 and 2.24.1 that enables an authenticated administrator with permissions to modify coverage stores through the REShttps://patchthecve.com/cve/CVE-2023-41877.htmlhttps://patchthecve.com/cve/CVE-2023-41877.htmlWed, 17 Jun 2026 06:22:59 +0000HIGH 7.2: GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A path traversal vulnerability in versions 2.23.4 and prior requires GeoServer Administrator with access to the admin console to misconfigure the Global Settings for log file location to