cbcvebase.

Geoserver Org.Geoserver.Extension Gs-Db2 vulnerabilities

1 known vulnerability affecting geoserver/org.geoserver.extension_gs-db2.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2025-27511P3HIGHCVSS 7.2fixed in 2.27.02026-06-18
CVE-2025-27511 [HIGH] CWE-74 CVE-2025-27511: GeoServer is an open source server that allows users to share and edit geospatial data. Prior to ver GeoServer is an open source server that allows users to share and edit geospatial data. Prior to version 2.27.0 of the GeoServer DB2 DataStore Extension, an administrator can perform a JNDI attack through specially crafted DB2 jdbc url leading to to Remote Code Execution (RCE). Version 2.27.0 fixes the issue.
nvd
Geoserver Org.Geoserver.Extension Gs-Db2 vulnerabilities | cvebase