CVE-2024-40625

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

GeoServer is an open source server that allows users to share and edit geospatial data. The Coverage rest api /workspaces/{workspaceName}/coveragestores/{storeName}/{method}.{format} allows attackers to upload files with a specified url (with {method} equals 'url') with no restrict. This vulnerability is fixed in 2.26.0.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-918

Affected software

Vendor	Product	Versions
geoserver	geoserver	< 2.26.0

References

https://github.com/geoserver/geoserver/security/advisories/GHSA-r4hf-r8gj-jgw2Third Party Advisory
https://osgeo-org.atlassian.net/browse/GEOS-11468Issue Tracking, Patch
https://osgeo-org.atlassian.net/browse/GEOS-11717Permissions Required

Timeline

Published: Jun 10, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-406265.4Outline is an open source, collaborative document editor. A type confusion issue was found in ProseMirror’s rendering process that leads to CVE-2024-406275.8Fastapi OPA is an opensource fastapi middleware which includes auth flow. HTTP `OPTIONS` requests are always allowed by `OpaMiddleware`, eve CVE-2024-406289.1JumpServer is an open-source Privileged Access Management (PAM) tool that provides DevOps and IT teams with on-demand and secure access to S CVE-2024-406299.8JumpServer is an open-source Privileged Access Management (PAM) tool that provides DevOps and IT teams with on-demand and secure access to S CVE-2024-40633.7A vulnerability was found in EZVIZ CS-C6-21WFR-8 5.2.7 Build 170628. It has been classified as problematic. This affects an unknown part of CVE-2024-406304.3OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation via a forma CVE-2024-406318.1Plate media is an open source, rich-text editor for React. Editors that use `MediaEmbedElement` and pass custom `urlParsers` to the `useMedi CVE-2024-406323.7Linkerd is an open source, ultralight, security-first service mesh for Kubernetes. In affected versions when the application being run by li CVE-2024-406335.3Sylius is an Open Source eCommerce Framework on Symfony. A security vulnerability was discovered in the `/api/v2/shop/adjustments/{id}` endp CVE-2024-406347.5Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. This report details a security vulnerability in Argo CD, where an CVE-2024-406357.8containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers l CVE-2024-406365.3Steeltoe is an open source project that provides a collection of libraries that helps users build production-grade cloud-native applications