A newly disclosed zero-day flaw in GeoServer is seeing active exploitation efforts, per watchTowr. The vulnerability, which has yet to be assigned a CVE identifier, is an SQL injection vulnerability in the open-source platform that can lead to remote code execution (RCE). The security defect remains unpatched.
GeoServer Zero-Day Targeted in Active Exploitation Attempts, Can Lead to RCE
Résumé + lien vers la source. Sans paywall, sans tracking.