CVE-2023-41339

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. The WMS specification defines an ``sld=<url>`` parameter for GetMap, GetLegendGraphic and GetFeatureInfo operations for user supplied "dynamic styling". Enabling the use of dynamic styles, without also configuring URL checks, provides the opportunity for Service Side Request Forgery. This vulnerability can be used to steal user NetNTLMv2 hashes which could be relayed or cracked externally to gain further access. This vulnerability has been patched in versions 2.22.5 and 2.23.2.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-918

Affected software

No affected versions have been published.

Timeline

Published
Oct 25, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-41345.5A use-after-free vulnerability was found in the cyttsp4_core driver in the Linux kernel. This issue occurs in the device cleanup routine dueCVE-2023-413435.4Rogic No-Code Database Builder's file uploading function has insufficient filtering for special characters. A remote attacker with regular uCVE-2023-413447.5NCSIST ManageEngine Mobile Device Manager(MDM) APP's special function has a path traversal vulnerability. An unauthenticated remote attackerCVE-2023-413458.8ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-generateCVE-2023-413468.8ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-refresh CVE-2023-413478.8ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its check token moCVE-2023-413488.8ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its code-authenticCVE-2023-413498.8ASUS router RT-AX88U has a vulnerability of using externally controllable format strings within its Advanced Open VPN function. An authenticCVE-2023-41356.5A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU. The QEMU process does not validate an offset provided byCVE-2023-413509.8Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of insufficient measures to prevent multiple failed authentication attempts. An unauthenCVE-2023-413519.8Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of authentication bypass, which allows an unauthenticated remote attacker to bypass the CVE-2023-413527.2Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of insufficient filtering for user input. A remote attacker with administrator privilege
CVE-2023-41339: Medium severity, CVSS 5.3 | Vulnix