PT-2026-84459
CVE-2026-63219
·
تاريخ النشر
2026-09-01
·
تاريخ التحديث
2026-10-01
الوصف من
CVSS 3.1
8.6
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
GeoNetwork versions prior to 4.4.12
GeoNetwork versions prior to 4.2.17
Description
An unprotected API endpoint used for creating new formatters via file upload allows unauthenticated attackers to upload arbitrary
.xsl or .zip files. This enables unauthorized write access to the server storage by allowing files to be written directly into the GeoNetwork formatter directory.Recommendations
Update GeoNetwork to version 4.4.12 or later.
Update GeoNetwork to version 4.2.17 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾