Threat intelligence / Vulnerability
CVE-2025-58360
OSGeo GeoServer contains an improper restriction of XML external entity reference vulnerability that occurs when the application accepts XML input through a specific endpoint /geoserver/wms operation GetMap and could allow an attacker to define external entities within the XML request.
Vulnerability
TypeVulnerability
External ID—
First seen2025-12-11
Last seen2025-12-11
Confidence
—
OSGeo GeoServer contains an improper restriction of XML external entity reference vulnerability that occurs when the application accepts XML input through a specific endpoint /geoserver/wms operation GetMap and could allow an attacker to define external entities within the XML request.
Labels
CISA KEV context
Vendor / productOSGeo GeoServer
Added2025-12-11
Due date2026-01-01
2 recorded
Relationships
2 external