Org.Geoserver.Extension
Approved changes feed: RSS · Atom
cpe:2.3:a:geoserver:org.geoserver.extension:gs-db2:*:*:*:*:*:*:*:*
part: a version: gs-db2 update: *
| Vendor | Geoserver (6cfb2577-01d7-5f65-afd6-17723404b366) |
|---|---|
| Product | Org.Geoserver.Extension (938d65f5-4a11-5bf4-98da-9cfd327e9053) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-27511 |
vulnerable | 2026-07-28 23:33:08.476701 |
GeoServer DB2 DataStore Extension has a JNDI Vulnerability via Store Connection
HIGH (7.2)
GeoServer is an open source server that allows users to share and edit geospatial data. Prior to version 2.27.0 of the GeoServer DB2 DataStore Extension, an administrator can perform a JNDI attack through specially crafted DB2 jdbc url leading to to Remote Code Execution (RCE). Version 2.27.0 fixes the issue.
Published: 2026-06-18T14:23:01.788Z
Updated: 2026-06-24T03:56:02.624Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.