Vendor

    GeoNode

    8 known vulnerabilities in products by GeoNode, 1 of them actively exploited (CISA KEV).

    Key figures

    8

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in GeoNode
    CriticalCVE-2022-24816

    Improper Control of Generation of Code in jai-ext

    In CISA KEV

    		10.0
    HighCVE-2023-42439

    GeoNode SSRF Bypass to return internal host data

    also in 1 other product

    		7.5
    HighCVE-2023-40017

    Geonode Server Side Request Forgery vulnerability

    also in 1 other product

    		7.5
    MediumCVE-2023-26043

    XML External Entity (XXE) injection in GeoServer style upload functionality

    also in 1 other product

    		6.5
    HighCVE-2023-28442

    Geoserver for GeoNode sensitive information leak

    also in 1 other product

    		7.5
    MediumCVE-2026-39921

    GeoNode < 4.4.5, 5.0.2 SSRF via Document Upload

    also in 1 other product

    		6.3
    MediumCVE-2026-39922

    GeoNode SSRF via Service Registration

    also in 1 other product

    		6.3
    MediumCVE-2024-27091

    GeoNode stored XSS to full account takeover

    also in 1 other product

    		6.1

    Products

    Products by GeoNode
    GeoNode70