CVE-2021-40822: SSRF Vulnerability in GeoServer
Summary
CVE-2021-40822: GeoServer allows SSRF via the option for setting a proxy host. Affects org.geoserver:gs-main across 2 version ranges.
< 2.18.5
>= 2.19.0, <= 2.19.2
No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
GeoServer is an open-source server for sharing geospatial data. It provides a web interface for managing and publishing geospatial data in various formats. The 'gs-main' package is a core component of GeoServer that handles the main functionality of the server. This package is written in Java and is commonly used in geospatial applications and systems. Unfortunately, the 'gs-main' package is vulnerable to a Server-Side Request Forgery (SSRF) attack.
Vulnerability Detail
The SSRF vulnerability in GeoServer allows an attacker to make arbitrary HTTP requests from the server, potentially bypassing security measures and accessing internal resources. This vulnerability exists in GeoServer versions 2.18.5 and earlier, as well as versions 2.19.0 to 2.19.2. By exploiting this vulnerability, an attacker can perform actions such as port scanning, accessing internal APIs, or retrieving sensitive information from internal systems. The vulnerability has a CVSS score of 7.5, indicating a high severity level.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
If upgrading to a patched version is not immediately feasible, a temporary workaround is to disable the option for setting a proxy host in the GeoServer configuration. This can be done by modifying the configuration files or using the GeoServer web interface to remove the proxy host setting. However, this workaround may impact certain functionality that relies on proxying requests, so it should be carefully evaluated before implementation.
Conclusion
The SSRF vulnerability in GeoServer can be mitigated by upgrading to a patched version of the software and reviewing and restricting the permissions of the GeoServer instance. It is important to take prompt action to protect systems and data from potential SSRF attacks. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for org.geoserver:gs-main →
FAQ
GeoServer is an open-source server for sharing geospatial data. It provides a web interface for managing and publishing geospatial data in various formats.
The 'gs-main' package is a core component of GeoServer that handles the main functionality of the server. It is written in Java and is commonly used in geospatial applications and systems.
A Server-Side Request Forgery (SSRF) attack is a type of vulnerability that allows an attacker to make arbitrary HTTP requests from the server, potentially bypassing security measures and accessing internal resources.
By exploiting this vulnerability, an attacker can perform actions such as port scanning, accessing internal APIs, or retrieving sensitive information from internal systems.
The CVSS score of this vulnerability is 7.5, indicating a high severity level.
Related vulnerabilities
Recent vulnerabilities recorded for org.geoserver:gs-main.
