** DISPUTED ** GeoServer 2, in some... CVE-2023-35042

- AV AC AU C I A
发布: 2023-06-12
修订: 2024-04-11

** DISPUTED ** GeoServer 2, in some configurations, allows remote attackers to execute arbitrary code via java.lang.Runtime.getRuntime().exec in wps:LiteralData within a wps:Execute request, as exploited in the wild in June 2023. NOTE: the vendor states that they are unable to reproduce this in any version.

0%
暂无可用Exp或PoC
当前有1条受影响产品信息