CVE-2023-35042
CriticalCVSS 9.8Exploitation Probability (EPSS)
Very high risk99th percentile - higher than 99% of all known CVEs
Summary
GeoServer 2, in some configurations, allows remote attackers to execute arbitrary code via java.lang.Runtime.getRuntime().exec in wps:LiteralData within a wps:Execute request.
Risk Assessment
Exploitation of this vulnerability could lead to full control over the GeoServer, posing a serious threat to the organization's data security.
Recommendation
It is recommended to update GeoServer to the latest version and review configurations to minimize the risk associated with this vulnerability.
Original NVD description (English source)
GeoServer 2, in some configurations, allows remote attackers to execute arbitrary code via java.lang.Runtime.getRuntime().exec in wps:LiteralData within a wps:Execute request, as exploited in the wild in June 2023. NOTE: the vendor states that they are unable to reproduce this in any version.