VendorsGeoSolutionsGroupgeonodeall versions
Vulnerabilities

GeoSolutionsGroup GeoNode

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

7CVEs
CVE-2023-42439
GeoNode SSRF Bypass to return internal host data
Published 2023-09-15 · Modified
7.5EPSS 0.010
CVE-2023-40017
Geonode Server Side Request Forgery vulnerability
Published 2023-08-24 · Modified
7.5EPSS 0.008
CVE-2023-28442
Geoserver for GeoNode sensitive information leak
Published 2023-03-23 · Modified
7.5EPSS 0.006
CVE-2023-26043
XML External Entity (XXE) injection in GeoServer style upload functionality
Published 2023-02-27 · Modified
6.5EPSS 0.008
CVE-2026-39921
GeoNode < 4.4.5, 5.0.2 SSRF via Document Upload
Published 2026-04-10 · Modified
6.3EPSS 0.004
CVE-2026-39922
GeoNode SSRF via Service Registration
Published 2026-04-10 · Modified
6.3EPSS 0.003
CVE-2024-27091
GeoNode stored XSS to full account takeover
Published 2024-03-27 · Analyzed
6.1EPSS 0.004