CVE record · 1 source
CVE-2026-39379
CVSS 7.1GeoNetwork is a catalog application to manage spatially referenced resources.
- Vendor
- Geonetwork
- Product
- core-geonetwork
- CVSS v3.1
- 7.1 AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N
- Weakness
- CWE-79, CWE-1336
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
GeoNetwork is a catalog application to manage spatially referenced resources.
GeoNetwork is a catalog application to manage spatially referenced resources. From 3.0.0 until 4.2.15 and 4.4.10, requesting a nonexistent or unauthorized service URL can cause an error page to reflect attacker-controlled request…