Geonetwork
Approved changes feed: RSS · Atom
cpe:2.3:a:geonetwork:geonetwork:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Geonetwork (666e9a4a-ae5a-5254-887a-86349fff6c33) |
|---|---|
| Product | Geonetwork (4b195800-6450-5178-9d8c-a1185b4f448d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-50899 |
vulnerable | 2026-06-08 05:52:03.672700 |
Geonetwork 4.2.0 - XML External Entity (XXE)
MEDIUM (6.5)
Geonetwork 3.10 through 4.2.0 contains an XML external entity vulnerability in PDF rendering that allows attackers to retrieve arbitrary files from the server. Attackers can exploit the insecure XML parser by crafting a malicious XML document with external entity references to read system files through the baseURL parameter in PDF creation requests.
Published: 2026-01-13T22:51:45.416Z
Updated: 2026-05-14T02:07:00.169Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.