Sploitus

CVE-2023-26043

No indexed exploits for CVE-2023-26043 yet

GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data. GeoNode is vulnerable to an XML External Entity (XXE) injection in the style upload functionality of GeoServer leading to Arbitrary File Read. This issue has been patched in version 4.0.3.

Affected products
Geonode, Geoserver
Geosolutionsgroup Geonode
< 4.0.3
Fix
Available
CVSS 3.1
6.5 MEDIUM
EPSS
0.8% (54th percentile)
Weakness
CWE-611
NVD status
Modified
Published
2023-02-27
CVE-2023-26043 at NVD
Authoritative description, scoring and affected products

No indexed exploits for CVE-2023-26043 yet

Our index is partial: it proves presence, never absence

No exploit for CVE-2023-26043 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.