GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
Search

Find a vulnerability

Search criteria Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    12 vulnerabilities by geonetwork

    CVE-2026-63219 (GCVE-0-2026-63219)

    Vulnerability from nvd – Published: 2026-09-03 17:13 – Updated: 2026-09-03 17:40
    VLAI
    Title
    Unauthenticated file upload via missing authorization on formatter upload endpoint
    Summary
    GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.12 and 4.2.17, the API endpoint for creating a new formatter via file upload is unprotected and allows the upload of external uncontrolled files. An unauthenticated attacker can upload arbitrary `.xsl` or `.zip` formatter files to the server. An unauthenticated attacker can write arbitrary files into the GeoNetwork formatter directory. On its own this constitutes unauthorized write access to server storage. The issue is patched in GeoNetwork versions 4.4.12 and 4.2.17.
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-03 17:40 UTC
    CWE
    Impacted products
    Vendor Product Version
    geonetwork core-geonetwork Affected: >= 4.3.0, < 4.4.12
    Affected: < 4.2.17
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-63219",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-03T17:40:15.181226Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-03T17:40:21.680Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "core-geonetwork",
              "vendor": "geonetwork",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003e= 4.3.0, \u003c 4.4.12"
                },
                {
                  "status": "affected",
                  "version": "\u003c 4.2.17"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.12 and 4.2.17, the API endpoint for creating a new formatter via file upload is unprotected and allows the upload of external uncontrolled files. An unauthenticated attacker can upload arbitrary `.xsl` or `.zip` formatter files to the server.  An unauthenticated attacker can write arbitrary files into the GeoNetwork formatter directory. On its own this constitutes unauthorized write access to server storage. The issue is patched in GeoNetwork versions 4.4.12 and 4.2.17."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 8.6,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-862",
                  "description": "CWE-862: Missing Authorization",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-03T17:13:01.357Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://github.com/geonetwork/core-geonetwork/security/advisories/GHSA-mh22-prqr-vf42",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/geonetwork/core-geonetwork/security/advisories/GHSA-mh22-prqr-vf42"
            },
            {
              "name": "https://github.com/geonetwork/core-geonetwork/pull/9346",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/geonetwork/core-geonetwork/pull/9346"
            },
            {
              "name": "https://docs.geonetwork-opensource.org/4.2/overview/change-log/version-4.2.17",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://docs.geonetwork-opensource.org/4.2/overview/change-log/version-4.2.17"
            },
            {
              "name": "https://docs.geonetwork-opensource.org/4.4/overview/change-log/version-4.4.12",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://docs.geonetwork-opensource.org/4.4/overview/change-log/version-4.4.12"
            },
            {
              "name": "https://thehackernews.com/2026/09/geonetwork-fixes-unauthenticated-rce.html",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://thehackernews.com/2026/09/geonetwork-fixes-unauthenticated-rce.html"
            }
          ],
          "source": {
            "advisory": "GHSA-mh22-prqr-vf42",
            "discovery": "UNKNOWN"
          },
          "title": "Unauthenticated file upload via missing authorization on formatter upload endpoint"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2026-63219",
        "datePublished": "2026-09-03T17:13:01.357Z",
        "dateReserved": "2026-07-15T22:19:06.907Z",
        "dateUpdated": "2026-09-03T17:40:21.680Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-58400 (GCVE-0-2026-58400)

    Vulnerability from nvd – Published: 2026-09-03 17:06 – Updated: 2026-09-03 17:06
    VLAI
    Title
    GeoNetwork vulnerable to Remote Code Execution via unsafe Saxon XSLT processor configuration in formatter
    Summary
    GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.12 and 4.2.17, the Saxon XSLT processor used to render formatters is configured without secure processing (`FEATURE_SECURE_PROCESSING`) and without disabling Java extension functions (`ALLOW_EXTERNAL_FUNCTIONS`). Any stylesheet loaded by GeoNetwork can therefore invoke `java.lang.Runtime.exec()` or `java.lang.ProcessBuilder` directly, achieving arbitrary command execution as the GeoNetwork process user. A user with sufficient privileges to upload a formatter can deliver a `.xsl` file containing Java extension call that execute arbitrary OS commands with the privileges of the GeoNetwork process. The issue is patched in GeoNetwork versions 4.4.12 and 4.2.17.
    CWE
    • CWE-94 - Improper Control of Generation of Code ('Code Injection')
    • CWE-470 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
    Impacted products
    Vendor Product Version
    geonetwork core-geonetwork Affected: >= 4.3.0, < 4.4.12
    Affected: < 4.2.17
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "cna": {
          "affected": [
            {
              "product": "core-geonetwork",
              "vendor": "geonetwork",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003e= 4.3.0, \u003c 4.4.12"
                },
                {
                  "status": "affected",
                  "version": "\u003c 4.2.17"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.12 and 4.2.17, the Saxon XSLT processor used to render formatters is configured without secure processing (`FEATURE_SECURE_PROCESSING`) and without disabling Java extension functions (`ALLOW_EXTERNAL_FUNCTIONS`). Any stylesheet loaded by GeoNetwork can therefore invoke\n`java.lang.Runtime.exec()` or `java.lang.ProcessBuilder` directly, achieving arbitrary command execution as the GeoNetwork process user. A user with sufficient privileges to upload a formatter can deliver a `.xsl` file containing Java extension call that execute arbitrary OS commands with the privileges of the GeoNetwork process. The issue is patched in GeoNetwork versions 4.4.12 and 4.2.17."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9.1,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-94",
                  "description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            },
            {
              "descriptions": [
                {
                  "cweId": "CWE-470",
                  "description": "CWE-470: Use of Externally-Controlled Input to Select Classes or Code (\u0027Unsafe Reflection\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-03T17:06:17.827Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://github.com/geonetwork/core-geonetwork/security/advisories/GHSA-x898-729x-cc3r",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/geonetwork/core-geonetwork/security/advisories/GHSA-x898-729x-cc3r"
            },
            {
              "name": "https://docs.geonetwork-opensource.org/4.2/overview/change-log/version-4.2.17",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://docs.geonetwork-opensource.org/4.2/overview/change-log/version-4.2.17"
            },
            {
              "name": "https://docs.geonetwork-opensource.org/4.4/overview/change-log/version-4.4.12",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://docs.geonetwork-opensource.org/4.4/overview/change-log/version-4.4.12"
            },
            {
              "name": "https://thehackernews.com/2026/09/geonetwork-fixes-unauthenticated-rce.html",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://thehackernews.com/2026/09/geonetwork-fixes-unauthenticated-rce.html"
            }
          ],
          "source": {
            "advisory": "GHSA-x898-729x-cc3r",
            "discovery": "UNKNOWN"
          },
          "title": "GeoNetwork vulnerable to Remote Code Execution via unsafe Saxon XSLT processor configuration in formatter"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2026-58400",
        "datePublished": "2026-09-03T17:06:17.827Z",
        "dateReserved": "2026-06-30T18:19:58.378Z",
        "dateUpdated": "2026-09-03T17:06:17.827Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-53573 (GCVE-0-2026-53573)

    Vulnerability from nvd – Published: 2026-07-31 22:16 – Updated: 2026-08-03 16:26
    VLAI
    Title
    core-geonetwork has an Open Redirect Bypass
    Summary
    GeoNetwork is a catalog application to manage spatially referenced resources. From 3.12.0 until 4.2.16 and 4.4.11, unsafe redirect validation in GeonetworkOAuth2LoginAuthenticationFilter and KeycloakAuthenticationProcessingFilter permits an attacker-controlled external redirect after login. This issue is fixed in versions 4.2.16 and 4.4.11.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-08-03 16:19 UTC
    CWE
    • CWE-601 - URL Redirection to Untrusted Site ('Open Redirect')
    Impacted products
    Vendor Product Version
    geonetwork core-geonetwork Affected: >= 3.12.0, <= 3.12.12
    Affected: >= 4.0.0-alpha.1, <= 4.0.6
    Affected: >= 4.2.0, < 4.2.16
    Affected: >= 4.4.0, < 4.4.11
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-53573",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-08-03T16:19:11.004512Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-08-03T16:26:56.688Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "core-geonetwork",
              "vendor": "geonetwork",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003e= 3.12.0, \u003c= 3.12.12"
                },
                {
                  "status": "affected",
                  "version": "\u003e= 4.0.0-alpha.1, \u003c= 4.0.6"
                },
                {
                  "status": "affected",
                  "version": "\u003e= 4.2.0, \u003c 4.2.16"
                },
                {
                  "status": "affected",
                  "version": "\u003e= 4.4.0, \u003c 4.4.11"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "GeoNetwork is a catalog application to manage spatially referenced resources. From 3.12.0 until 4.2.16 and 4.4.11, unsafe redirect validation in GeonetworkOAuth2LoginAuthenticationFilter and KeycloakAuthenticationProcessingFilter permits an attacker-controlled external redirect after login. This issue is fixed in versions 4.2.16 and 4.4.11."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "NETWORK",
                "baseScore": 4.8,
                "baseSeverity": "MEDIUM",
                "privilegesRequired": "LOW",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "LOW",
                "userInteraction": "ACTIVE",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "NONE",
                "vulnConfidentialityImpact": "NONE",
                "vulnIntegrityImpact": "NONE"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-601",
                  "description": "CWE-601: URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-07-31T22:16:25.110Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://github.com/geonetwork/core-geonetwork/security/advisories/GHSA-pjp7-q6wp-97qx",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/geonetwork/core-geonetwork/security/advisories/GHSA-pjp7-q6wp-97qx"
            },
            {
              "name": "https://github.com/geonetwork/core-geonetwork/pull/9307",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/geonetwork/core-geonetwork/pull/9307"
            },
            {
              "name": "https://github.com/geonetwork/core-geonetwork/pull/9309",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/geonetwork/core-geonetwork/pull/9309"
            },
            {
              "name": "https://github.com/geonetwork/core-geonetwork/commit/0d74f673dfc926bde935819ed34636d789b2fecd",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/geonetwork/core-geonetwork/commit/0d74f673dfc926bde935819ed34636d789b2fecd"
            },
            {
              "name": "https://github.com/geonetwork/core-geonetwork/commit/cde9b6481a29e2473b7b74479b4e3fd6843bac4e",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/geonetwork/core-geonetwork/commit/cde9b6481a29e2473b7b74479b4e3fd6843bac4e"
            },
            {
              "name": "https://github.com/geonetwork/core-geonetwork/releases/tag/4.2.16",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/geonetwork/core-geonetwork/releases/tag/4.2.16"
            },
            {
              "name": "https://github.com/geonetwork/core-geonetwork/releases/tag/4.4.11",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/geonetwork/core-geonetwork/releases/tag/4.4.11"
            }
          ],
          "source": {
            "advisory": "GHSA-pjp7-q6wp-97qx",
            "discovery": "UNKNOWN"
          },
          "title": "core-geonetwork has an Open Redirect Bypass"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2026-53573",
        "datePublished": "2026-07-31T22:16:25.110Z",
        "dateReserved": "2026-06-09T19:11:53.483Z",
        "dateUpdated": "2026-08-03T16:26:56.688Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2022-50899 (GCVE-0-2022-50899)

    Vulnerability from nvd – Published: 2026-01-13 22:51 – Updated: 2026-05-14 02:07
    VLAI
    Title
    Geonetwork 4.2.0 - XML External Entity (XXE)
    Summary
    Geonetwork 3.10 through 4.2.0 contains an XML external entity vulnerability in PDF rendering that allows attackers to retrieve arbitrary files from the server. Attackers can exploit the insecure XML parser by crafting a malicious XML document with external entity references to read system files through the baseURL parameter in PDF creation requests.
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-01-14 15:52 UTC
    CWE
    • CWE-611 - Improper Restriction of XML External Entity Reference
    Impacted products
    Vendor Product Version
    GeoNetwork GeoNetwork Affected: 3.10 , ≤ 4.2.0 (custom)
        cpe:2.3:a:osgeo:geonetwork:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Date Public
    2022-07-29 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2022-50899",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-01-14T15:52:28.159438Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-01-14T19:20:51.974Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "GeoNetwork",
              "vendor": "GeoNetwork",
              "versions": [
                {
                  "lessThanOrEqual": "4.2.0",
                  "status": "affected",
                  "version": "3.10",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "cpeApplicability": [
            {
              "nodes": [
                {
                  "cpeMatch": [
                    {
                      "criteria": "cpe:2.3:a:osgeo:geonetwork:*:*:*:*:*:*:*:*",
                      "versionEndIncluding": "4.2.0",
                      "versionStartIncluding": "3.10",
                      "vulnerable": true
                    }
                  ],
                  "negate": false,
                  "operator": "OR"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "Amel BOUZIANE-LEBLOND"
            }
          ],
          "datePublic": "2022-07-29T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Geonetwork 3.10 through 4.2.0 contains an XML external entity vulnerability in PDF rendering that allows attackers to retrieve arbitrary files from the server. Attackers can exploit the insecure XML parser by crafting a malicious XML document with external entity references to read system files through the baseURL parameter in PDF creation requests."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "NETWORK",
                "baseScore": 8.7,
                "baseSeverity": "HIGH",
                "exploitMaturity": "NOT_DEFINED",
                "privilegesRequired": "NONE",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "NONE",
                "vulnConfidentialityImpact": "HIGH",
                "vulnIntegrityImpact": "NONE",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "format": "CVSS"
            },
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 6.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "NONE",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                "version": "3.1"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-611",
                  "description": "Improper Restriction of XML External Entity Reference",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-05-14T02:07:00.169Z",
            "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
            "shortName": "VulnCheck"
          },
          "references": [
            {
              "name": "ExploitDB-50982",
              "tags": [
                "exploit"
              ],
              "url": "https://www.exploit-db.com/exploits/50982"
            },
            {
              "name": "GeoNetwork Official Homepage",
              "tags": [
                "product"
              ],
              "url": "https://geonetwork-opensource.org/"
            },
            {
              "name": "VulnCheck Advisory: Geonetwork 4.2.0 - XML External Entity (XXE)",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://www.vulncheck.com/advisories/geonetwork-xml-external-entity-xxe"
            }
          ],
          "title": "Geonetwork 4.2.0 - XML External Entity (XXE)",
          "x_generator": {
            "engine": "vulncheck"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "assignerShortName": "VulnCheck",
        "cveId": "CVE-2022-50899",
        "datePublished": "2026-01-13T22:51:45.416Z",
        "dateReserved": "2026-01-10T15:05:18.988Z",
        "dateUpdated": "2026-05-14T02:07:00.169Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2024-32037 (GCVE-0-2024-32037)

    Vulnerability from nvd – Published: 2025-02-11 21:50 – Updated: 2025-02-12 15:37
    VLAI
    Title
    GeoNetwork vulnerable to search end-point information disclosure in response headers
    Summary
    GeoNetwork is a catalog application to manage spatially referenced resources. In versions prior to 4.2.10 and 4.4.5, the search end-point response headers contain information about Elasticsearch software in use. This information is valuable from a security point of view because it allows software used by the server to be easily identified. GeoNetwork 4.4.5 and 4.2.10 fix this issue. No known workarounds are available.
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2025-02-12 15:37 UTC
    CWE
    • CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
    Impacted products
    Vendor Product Version
    geonetwork core-geonetwork Affected: < 4.2.10
    Affected: >= 4.4.0, < 4.4.5
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2024-32037",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2025-02-12T15:37:36.526856Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2025-02-12T15:37:46.364Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "core-geonetwork",
              "vendor": "geonetwork",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003c 4.2.10"
                },
                {
                  "status": "affected",
                  "version": "\u003e= 4.4.0, \u003c 4.4.5"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "GeoNetwork is a catalog application to manage spatially referenced resources. In versions prior to 4.2.10 and 4.4.5, the search end-point response headers contain information about Elasticsearch software in use. This information is valuable from a security point of view because it allows software used by the server to be easily identified. GeoNetwork 4.4.5 and 4.2.10 fix this issue. No known workarounds are available."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 0,
                "baseSeverity": "NONE",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-200",
                  "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2025-02-11T21:50:29.138Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://github.com/geonetwork/core-geonetwork/security/advisories/GHSA-52rf-25hq-5m33",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/geonetwork/core-geonetwork/security/advisories/GHSA-52rf-25hq-5m33"
            },
            {
              "name": "https://docs.geonetwork-opensource.org/4.4/api/search",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://docs.geonetwork-opensource.org/4.4/api/search"
            },
            {
              "name": "https://github.com/geonetwork/core-geonetwork/releases/tag/4.2.10",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/geonetwork/core-geonetwork/releases/tag/4.2.10"
            },
            {
              "name": "https://github.com/geonetwork/core-geonetwork/releases/tag/4.4.5",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/geonetwork/core-geonetwork/releases/tag/4.4.5"
            }
          ],
          "source": {
            "advisory": "GHSA-52rf-25hq-5m33",
            "discovery": "UNKNOWN"
          },
          "title": "GeoNetwork vulnerable to search end-point information disclosure in response headers"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2024-32037",
        "datePublished": "2025-02-11T21:50:29.138Z",
        "dateReserved": "2024-04-09T15:29:35.939Z",
        "dateUpdated": "2025-02-12T15:37:46.364Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2006-5513 (GCVE-0-2006-5513)

    Vulnerability from nvd – Published: 2006-10-26 16:00 – Updated: 2024-08-07 19:55
    VLAI
    Summary
    SQL injection vulnerability in GeoNetwork opensource before 2.0.3 allows remote attackers to execute arbitrary SQL commands, and complete a login, via unspecified vectors.
    Severity
    No CVSS data available.
    CWE
    • n/a
    References
    URL Tags
    http://secunia.com/advisories/22502 third-party-advisoryx_refsource_SECUNIA
    http://sourceforge.net/project/shownotes.php?rele… x_refsource_CONFIRM
    http://www.vupen.com/english/advisories/2006/4151 vdb-entryx_refsource_VUPEN
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://www.securityfocus.com/bid/20671 vdb-entryx_refsource_BID
    Date Public
    2006-10-23 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T19:55:53.047Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "22502",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/22502"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://sourceforge.net/project/shownotes.php?release_id=457195"
              },
              {
                "name": "ADV-2006-4151",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2006/4151"
              },
              {
                "name": "geonetwork-unspecified-sql-injection(29771)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29771"
              },
              {
                "name": "20671",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/20671"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2006-10-23T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "SQL injection vulnerability in GeoNetwork opensource before 2.0.3 allows remote attackers to execute arbitrary SQL commands, and complete a login, via unspecified vectors."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-07-19T15:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "22502",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/22502"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://sourceforge.net/project/shownotes.php?release_id=457195"
            },
            {
              "name": "ADV-2006-4151",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2006/4151"
            },
            {
              "name": "geonetwork-unspecified-sql-injection(29771)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29771"
            },
            {
              "name": "20671",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/20671"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2006-5513",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "SQL injection vulnerability in GeoNetwork opensource before 2.0.3 allows remote attackers to execute arbitrary SQL commands, and complete a login, via unspecified vectors."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "22502",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/22502"
                },
                {
                  "name": "http://sourceforge.net/project/shownotes.php?release_id=457195",
                  "refsource": "CONFIRM",
                  "url": "http://sourceforge.net/project/shownotes.php?release_id=457195"
                },
                {
                  "name": "ADV-2006-4151",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2006/4151"
                },
                {
                  "name": "geonetwork-unspecified-sql-injection(29771)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29771"
                },
                {
                  "name": "20671",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/20671"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2006-5513",
        "datePublished": "2006-10-26T16:00:00.000Z",
        "dateReserved": "2006-10-26T00:00:00.000Z",
        "dateUpdated": "2024-08-07T19:55:53.047Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2026-63219 (GCVE-0-2026-63219)

    Vulnerability from cvelistv5 – Published: 2026-09-03 17:13 – Updated: 2026-09-03 17:40
    VLAI
    Title
    Unauthenticated file upload via missing authorization on formatter upload endpoint
    Summary
    GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.12 and 4.2.17, the API endpoint for creating a new formatter via file upload is unprotected and allows the upload of external uncontrolled files. An unauthenticated attacker can upload arbitrary `.xsl` or `.zip` formatter files to the server. An unauthenticated attacker can write arbitrary files into the GeoNetwork formatter directory. On its own this constitutes unauthorized write access to server storage. The issue is patched in GeoNetwork versions 4.4.12 and 4.2.17.
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-03 17:40 UTC
    CWE
    Impacted products
    Vendor Product Version
    geonetwork core-geonetwork Affected: >= 4.3.0, < 4.4.12
    Affected: < 4.2.17
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-63219",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-03T17:40:15.181226Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-03T17:40:21.680Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "core-geonetwork",
              "vendor": "geonetwork",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003e= 4.3.0, \u003c 4.4.12"
                },
                {
                  "status": "affected",
                  "version": "\u003c 4.2.17"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.12 and 4.2.17, the API endpoint for creating a new formatter via file upload is unprotected and allows the upload of external uncontrolled files. An unauthenticated attacker can upload arbitrary `.xsl` or `.zip` formatter files to the server.  An unauthenticated attacker can write arbitrary files into the GeoNetwork formatter directory. On its own this constitutes unauthorized write access to server storage. The issue is patched in GeoNetwork versions 4.4.12 and 4.2.17."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 8.6,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-862",
                  "description": "CWE-862: Missing Authorization",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-03T17:13:01.357Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://github.com/geonetwork/core-geonetwork/security/advisories/GHSA-mh22-prqr-vf42",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/geonetwork/core-geonetwork/security/advisories/GHSA-mh22-prqr-vf42"
            },
            {
              "name": "https://github.com/geonetwork/core-geonetwork/pull/9346",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/geonetwork/core-geonetwork/pull/9346"
            },
            {
              "name": "https://docs.geonetwork-opensource.org/4.2/overview/change-log/version-4.2.17",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://docs.geonetwork-opensource.org/4.2/overview/change-log/version-4.2.17"
            },
            {
              "name": "https://docs.geonetwork-opensource.org/4.4/overview/change-log/version-4.4.12",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://docs.geonetwork-opensource.org/4.4/overview/change-log/version-4.4.12"
            },
            {
              "name": "https://thehackernews.com/2026/09/geonetwork-fixes-unauthenticated-rce.html",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://thehackernews.com/2026/09/geonetwork-fixes-unauthenticated-rce.html"
            }
          ],
          "source": {
            "advisory": "GHSA-mh22-prqr-vf42",
            "discovery": "UNKNOWN"
          },
          "title": "Unauthenticated file upload via missing authorization on formatter upload endpoint"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2026-63219",
        "datePublished": "2026-09-03T17:13:01.357Z",
        "dateReserved": "2026-07-15T22:19:06.907Z",
        "dateUpdated": "2026-09-03T17:40:21.680Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-58400 (GCVE-0-2026-58400)

    Vulnerability from cvelistv5 – Published: 2026-09-03 17:06 – Updated: 2026-09-03 17:06
    VLAI
    Title
    GeoNetwork vulnerable to Remote Code Execution via unsafe Saxon XSLT processor configuration in formatter
    Summary
    GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.12 and 4.2.17, the Saxon XSLT processor used to render formatters is configured without secure processing (`FEATURE_SECURE_PROCESSING`) and without disabling Java extension functions (`ALLOW_EXTERNAL_FUNCTIONS`). Any stylesheet loaded by GeoNetwork can therefore invoke `java.lang.Runtime.exec()` or `java.lang.ProcessBuilder` directly, achieving arbitrary command execution as the GeoNetwork process user. A user with sufficient privileges to upload a formatter can deliver a `.xsl` file containing Java extension call that execute arbitrary OS commands with the privileges of the GeoNetwork process. The issue is patched in GeoNetwork versions 4.4.12 and 4.2.17.
    CWE
    • CWE-94 - Improper Control of Generation of Code ('Code Injection')
    • CWE-470 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
    Impacted products
    Vendor Product Version
    geonetwork core-geonetwork Affected: >= 4.3.0, < 4.4.12
    Affected: < 4.2.17
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "cna": {
          "affected": [
            {
              "product": "core-geonetwork",
              "vendor": "geonetwork",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003e= 4.3.0, \u003c 4.4.12"
                },
                {
                  "status": "affected",
                  "version": "\u003c 4.2.17"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.12 and 4.2.17, the Saxon XSLT processor used to render formatters is configured without secure processing (`FEATURE_SECURE_PROCESSING`) and without disabling Java extension functions (`ALLOW_EXTERNAL_FUNCTIONS`). Any stylesheet loaded by GeoNetwork can therefore invoke\n`java.lang.Runtime.exec()` or `java.lang.ProcessBuilder` directly, achieving arbitrary command execution as the GeoNetwork process user. A user with sufficient privileges to upload a formatter can deliver a `.xsl` file containing Java extension call that execute arbitrary OS commands with the privileges of the GeoNetwork process. The issue is patched in GeoNetwork versions 4.4.12 and 4.2.17."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9.1,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-94",
                  "description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            },
            {
              "descriptions": [
                {
                  "cweId": "CWE-470",
                  "description": "CWE-470: Use of Externally-Controlled Input to Select Classes or Code (\u0027Unsafe Reflection\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-03T17:06:17.827Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://github.com/geonetwork/core-geonetwork/security/advisories/GHSA-x898-729x-cc3r",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/geonetwork/core-geonetwork/security/advisories/GHSA-x898-729x-cc3r"
            },
            {
              "name": "https://docs.geonetwork-opensource.org/4.2/overview/change-log/version-4.2.17",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://docs.geonetwork-opensource.org/4.2/overview/change-log/version-4.2.17"
            },
            {
              "name": "https://docs.geonetwork-opensource.org/4.4/overview/change-log/version-4.4.12",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://docs.geonetwork-opensource.org/4.4/overview/change-log/version-4.4.12"
            },
            {
              "name": "https://thehackernews.com/2026/09/geonetwork-fixes-unauthenticated-rce.html",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://thehackernews.com/2026/09/geonetwork-fixes-unauthenticated-rce.html"
            }
          ],
          "source": {
            "advisory": "GHSA-x898-729x-cc3r",
            "discovery": "UNKNOWN"
          },
          "title": "GeoNetwork vulnerable to Remote Code Execution via unsafe Saxon XSLT processor configuration in formatter"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2026-58400",
        "datePublished": "2026-09-03T17:06:17.827Z",
        "dateReserved": "2026-06-30T18:19:58.378Z",
        "dateUpdated": "2026-09-03T17:06:17.827Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-53573 (GCVE-0-2026-53573)

    Vulnerability from cvelistv5 – Published: 2026-07-31 22:16 – Updated: 2026-08-03 16:26
    VLAI
    Title
    core-geonetwork has an Open Redirect Bypass
    Summary
    GeoNetwork is a catalog application to manage spatially referenced resources. From 3.12.0 until 4.2.16 and 4.4.11, unsafe redirect validation in GeonetworkOAuth2LoginAuthenticationFilter and KeycloakAuthenticationProcessingFilter permits an attacker-controlled external redirect after login. This issue is fixed in versions 4.2.16 and 4.4.11.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-08-03 16:19 UTC
    CWE
    • CWE-601 - URL Redirection to Untrusted Site ('Open Redirect')
    Impacted products
    Vendor Product Version
    geonetwork core-geonetwork Affected: >= 3.12.0, <= 3.12.12
    Affected: >= 4.0.0-alpha.1, <= 4.0.6
    Affected: >= 4.2.0, < 4.2.16
    Affected: >= 4.4.0, < 4.4.11
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-53573",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-08-03T16:19:11.004512Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-08-03T16:26:56.688Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "core-geonetwork",
              "vendor": "geonetwork",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003e= 3.12.0, \u003c= 3.12.12"
                },
                {
                  "status": "affected",
                  "version": "\u003e= 4.0.0-alpha.1, \u003c= 4.0.6"
                },
                {
                  "status": "affected",
                  "version": "\u003e= 4.2.0, \u003c 4.2.16"
                },
                {
                  "status": "affected",
                  "version": "\u003e= 4.4.0, \u003c 4.4.11"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "GeoNetwork is a catalog application to manage spatially referenced resources. From 3.12.0 until 4.2.16 and 4.4.11, unsafe redirect validation in GeonetworkOAuth2LoginAuthenticationFilter and KeycloakAuthenticationProcessingFilter permits an attacker-controlled external redirect after login. This issue is fixed in versions 4.2.16 and 4.4.11."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "NETWORK",
                "baseScore": 4.8,
                "baseSeverity": "MEDIUM",
                "privilegesRequired": "LOW",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "LOW",
                "userInteraction": "ACTIVE",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "NONE",
                "vulnConfidentialityImpact": "NONE",
                "vulnIntegrityImpact": "NONE"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-601",
                  "description": "CWE-601: URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-07-31T22:16:25.110Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://github.com/geonetwork/core-geonetwork/security/advisories/GHSA-pjp7-q6wp-97qx",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/geonetwork/core-geonetwork/security/advisories/GHSA-pjp7-q6wp-97qx"
            },
            {
              "name": "https://github.com/geonetwork/core-geonetwork/pull/9307",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/geonetwork/core-geonetwork/pull/9307"
            },
            {
              "name": "https://github.com/geonetwork/core-geonetwork/pull/9309",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/geonetwork/core-geonetwork/pull/9309"
            },
            {
              "name": "https://github.com/geonetwork/core-geonetwork/commit/0d74f673dfc926bde935819ed34636d789b2fecd",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/geonetwork/core-geonetwork/commit/0d74f673dfc926bde935819ed34636d789b2fecd"
            },
            {
              "name": "https://github.com/geonetwork/core-geonetwork/commit/cde9b6481a29e2473b7b74479b4e3fd6843bac4e",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/geonetwork/core-geonetwork/commit/cde9b6481a29e2473b7b74479b4e3fd6843bac4e"
            },
            {
              "name": "https://github.com/geonetwork/core-geonetwork/releases/tag/4.2.16",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/geonetwork/core-geonetwork/releases/tag/4.2.16"
            },
            {
              "name": "https://github.com/geonetwork/core-geonetwork/releases/tag/4.4.11",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/geonetwork/core-geonetwork/releases/tag/4.4.11"
            }
          ],
          "source": {
            "advisory": "GHSA-pjp7-q6wp-97qx",
            "discovery": "UNKNOWN"
          },
          "title": "core-geonetwork has an Open Redirect Bypass"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2026-53573",
        "datePublished": "2026-07-31T22:16:25.110Z",
        "dateReserved": "2026-06-09T19:11:53.483Z",
        "dateUpdated": "2026-08-03T16:26:56.688Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2022-50899 (GCVE-0-2022-50899)

    Vulnerability from cvelistv5 – Published: 2026-01-13 22:51 – Updated: 2026-05-14 02:07
    VLAI
    Title
    Geonetwork 4.2.0 - XML External Entity (XXE)
    Summary
    Geonetwork 3.10 through 4.2.0 contains an XML external entity vulnerability in PDF rendering that allows attackers to retrieve arbitrary files from the server. Attackers can exploit the insecure XML parser by crafting a malicious XML document with external entity references to read system files through the baseURL parameter in PDF creation requests.
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-01-14 15:52 UTC
    CWE
    • CWE-611 - Improper Restriction of XML External Entity Reference
    Impacted products
    Vendor Product Version
    GeoNetwork GeoNetwork Affected: 3.10 , ≤ 4.2.0 (custom)
        cpe:2.3:a:osgeo:geonetwork:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Date Public
    2022-07-29 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2022-50899",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-01-14T15:52:28.159438Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-01-14T19:20:51.974Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "GeoNetwork",
              "vendor": "GeoNetwork",
              "versions": [
                {
                  "lessThanOrEqual": "4.2.0",
                  "status": "affected",
                  "version": "3.10",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "cpeApplicability": [
            {
              "nodes": [
                {
                  "cpeMatch": [
                    {
                      "criteria": "cpe:2.3:a:osgeo:geonetwork:*:*:*:*:*:*:*:*",
                      "versionEndIncluding": "4.2.0",
                      "versionStartIncluding": "3.10",
                      "vulnerable": true
                    }
                  ],
                  "negate": false,
                  "operator": "OR"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "Amel BOUZIANE-LEBLOND"
            }
          ],
          "datePublic": "2022-07-29T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Geonetwork 3.10 through 4.2.0 contains an XML external entity vulnerability in PDF rendering that allows attackers to retrieve arbitrary files from the server. Attackers can exploit the insecure XML parser by crafting a malicious XML document with external entity references to read system files through the baseURL parameter in PDF creation requests."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "NETWORK",
                "baseScore": 8.7,
                "baseSeverity": "HIGH",
                "exploitMaturity": "NOT_DEFINED",
                "privilegesRequired": "NONE",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "NONE",
                "vulnConfidentialityImpact": "HIGH",
                "vulnIntegrityImpact": "NONE",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "format": "CVSS"
            },
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 6.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "NONE",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                "version": "3.1"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-611",
                  "description": "Improper Restriction of XML External Entity Reference",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-05-14T02:07:00.169Z",
            "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
            "shortName": "VulnCheck"
          },
          "references": [
            {
              "name": "ExploitDB-50982",
              "tags": [
                "exploit"
              ],
              "url": "https://www.exploit-db.com/exploits/50982"
            },
            {
              "name": "GeoNetwork Official Homepage",
              "tags": [
                "product"
              ],
              "url": "https://geonetwork-opensource.org/"
            },
            {
              "name": "VulnCheck Advisory: Geonetwork 4.2.0 - XML External Entity (XXE)",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://www.vulncheck.com/advisories/geonetwork-xml-external-entity-xxe"
            }
          ],
          "title": "Geonetwork 4.2.0 - XML External Entity (XXE)",
          "x_generator": {
            "engine": "vulncheck"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "assignerShortName": "VulnCheck",
        "cveId": "CVE-2022-50899",
        "datePublished": "2026-01-13T22:51:45.416Z",
        "dateReserved": "2026-01-10T15:05:18.988Z",
        "dateUpdated": "2026-05-14T02:07:00.169Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2024-32037 (GCVE-0-2024-32037)

    Vulnerability from cvelistv5 – Published: 2025-02-11 21:50 – Updated: 2025-02-12 15:37
    VLAI
    Title
    GeoNetwork vulnerable to search end-point information disclosure in response headers
    Summary
    GeoNetwork is a catalog application to manage spatially referenced resources. In versions prior to 4.2.10 and 4.4.5, the search end-point response headers contain information about Elasticsearch software in use. This information is valuable from a security point of view because it allows software used by the server to be easily identified. GeoNetwork 4.4.5 and 4.2.10 fix this issue. No known workarounds are available.
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2025-02-12 15:37 UTC
    CWE
    • CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
    Impacted products
    Vendor Product Version
    geonetwork core-geonetwork Affected: < 4.2.10
    Affected: >= 4.4.0, < 4.4.5
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2024-32037",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2025-02-12T15:37:36.526856Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2025-02-12T15:37:46.364Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "core-geonetwork",
              "vendor": "geonetwork",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003c 4.2.10"
                },
                {
                  "status": "affected",
                  "version": "\u003e= 4.4.0, \u003c 4.4.5"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "GeoNetwork is a catalog application to manage spatially referenced resources. In versions prior to 4.2.10 and 4.4.5, the search end-point response headers contain information about Elasticsearch software in use. This information is valuable from a security point of view because it allows software used by the server to be easily identified. GeoNetwork 4.4.5 and 4.2.10 fix this issue. No known workarounds are available."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 0,
                "baseSeverity": "NONE",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-200",
                  "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2025-02-11T21:50:29.138Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://github.com/geonetwork/core-geonetwork/security/advisories/GHSA-52rf-25hq-5m33",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/geonetwork/core-geonetwork/security/advisories/GHSA-52rf-25hq-5m33"
            },
            {
              "name": "https://docs.geonetwork-opensource.org/4.4/api/search",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://docs.geonetwork-opensource.org/4.4/api/search"
            },
            {
              "name": "https://github.com/geonetwork/core-geonetwork/releases/tag/4.2.10",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/geonetwork/core-geonetwork/releases/tag/4.2.10"
            },
            {
              "name": "https://github.com/geonetwork/core-geonetwork/releases/tag/4.4.5",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/geonetwork/core-geonetwork/releases/tag/4.4.5"
            }
          ],
          "source": {
            "advisory": "GHSA-52rf-25hq-5m33",
            "discovery": "UNKNOWN"
          },
          "title": "GeoNetwork vulnerable to search end-point information disclosure in response headers"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2024-32037",
        "datePublished": "2025-02-11T21:50:29.138Z",
        "dateReserved": "2024-04-09T15:29:35.939Z",
        "dateUpdated": "2025-02-12T15:37:46.364Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2006-5513 (GCVE-0-2006-5513)

    Vulnerability from cvelistv5 – Published: 2006-10-26 16:00 – Updated: 2024-08-07 19:55
    VLAI
    Summary
    SQL injection vulnerability in GeoNetwork opensource before 2.0.3 allows remote attackers to execute arbitrary SQL commands, and complete a login, via unspecified vectors.
    Severity
    No CVSS data available.
    CWE
    • n/a
    References
    URL Tags
    http://secunia.com/advisories/22502 third-party-advisoryx_refsource_SECUNIA
    http://sourceforge.net/project/shownotes.php?rele… x_refsource_CONFIRM
    http://www.vupen.com/english/advisories/2006/4151 vdb-entryx_refsource_VUPEN
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://www.securityfocus.com/bid/20671 vdb-entryx_refsource_BID
    Date Public
    2006-10-23 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T19:55:53.047Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "22502",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/22502"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://sourceforge.net/project/shownotes.php?release_id=457195"
              },
              {
                "name": "ADV-2006-4151",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2006/4151"
              },
              {
                "name": "geonetwork-unspecified-sql-injection(29771)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29771"
              },
              {
                "name": "20671",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/20671"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2006-10-23T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "SQL injection vulnerability in GeoNetwork opensource before 2.0.3 allows remote attackers to execute arbitrary SQL commands, and complete a login, via unspecified vectors."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-07-19T15:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "22502",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/22502"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://sourceforge.net/project/shownotes.php?release_id=457195"
            },
            {
              "name": "ADV-2006-4151",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2006/4151"
            },
            {
              "name": "geonetwork-unspecified-sql-injection(29771)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29771"
            },
            {
              "name": "20671",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/20671"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2006-5513",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "SQL injection vulnerability in GeoNetwork opensource before 2.0.3 allows remote attackers to execute arbitrary SQL commands, and complete a login, via unspecified vectors."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "22502",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/22502"
                },
                {
                  "name": "http://sourceforge.net/project/shownotes.php?release_id=457195",
                  "refsource": "CONFIRM",
                  "url": "http://sourceforge.net/project/shownotes.php?release_id=457195"
                },
                {
                  "name": "ADV-2006-4151",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2006/4151"
                },
                {
                  "name": "geonetwork-unspecified-sql-injection(29771)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29771"
                },
                {
                  "name": "20671",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/20671"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2006-5513",
        "datePublished": "2006-10-26T16:00:00.000Z",
        "dateReserved": "2006-10-26T00:00:00.000Z",
        "dateUpdated": "2024-08-07T19:55:53.047Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }