CVE-2024-38524 — GWC Home Page communicate version and revision information
GeoServer is an open source server that allows users to share and edit geospatial data. org.geowebcache.GeoWebCacheDispatcher.handleFrontPage(HttpServletRequest, HttpServletResp…
Published: 2025-06-10 · CVSS: 5.3 · CVSS 3.1
GeoServer is an open source server that allows users to share and edit geospatial data. org.geowebcache.GeoWebCacheDispatcher.handleFrontPage(HttpServletRequest, HttpServletResponse) has no check to hide potentially sensitive information from users except for a hidden system property to hide the storage locations that defaults to showing the locations. This vulnerability is fixed in 2.26.2 and 2.25.6.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7