QID 150856

Date Published: 2024-04-04

QID 150856: GeoServer Arbitrary File Renaming Vulnerability (CVE-2024-23634)

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data.

An Arbitrary File Renaming vulnerability exists in GeoServer that enables an authenticated administrator with permissions to modify stores through the REST Coverage Store or Data Store API to rename arbitrary files and directories with a name that does not end in '.zip'.

Affected Versions:
GeoServer Versions prior to version 2.23.5
GeoServer Versions prior to version 2.24.2

QID Detection Logic (Unauthenticated):
This QID sends HTTP GET requests and checks for vulnerable version of GeoServer running on the target host.

Successful exploitation of this vulnerability could lead to critical outcomes. Renaming GeoServer files may result in a Denial of Service (DoS) condition, either by completely preventing GeoServer from running or effectively deleting specific resources such as workspaces, layers, or styles.

CVSS V3 rated as High - 6 severity.

CVSS V2 rated as High - 8 severity.

Solution

Customers are advised to upgrade to latest version of GeoServer to remediate this vulnerability.

For more information pertaining to this vulnerability, please refer GitHub Security Advisory.

For information regarding GeoServer releases, please refer GeoServer Blog.

Vendor References

GHSA-75m5-hh4r-q9gx - github.com/geoserver/geoserver/security/advisories/GHSA-75m5-hh4r-q9gx

CVEs related to QID 150856

CVE-2024-23634 |

Software Advisories

Advisory ID	Software	Component	Link
GHSA-75m5-hh4r-q9gx			github.com/geoserver/geoserver/security/advisories/GHSA-75m5-hh4r-q9gx

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].