CVE-2026-39921
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
An SSRF vulnerability in GeoNode allows authenticated users with document upload permissions to send arbitrary HTTP requests by providing a malicious URL in the doc_url parameter. Attackers can target internal network resources, loopback addresses, RFC1918 addresses, or cloud metadata services.
Risk Assessment
The risk includes internal network scanning, access to sensitive internal services (e.g., cloud metadata), and potential escalation of attacks against other systems within the organization.
Recommendation
Immediately upgrade GeoNode to version 4.4.5 or later (for 4.x branch) and 5.0.2 or later (for 5.x branch). In the interim, restrict document upload permissions and implement IP address filtering at the network firewall level.
Original NVD description (English source)
GeoNode versions 4.0 before 4.4.5 and 5.0 before 5.0.2 contain a server-side request forgery vulnerability that allows authenticated users with document upload permissions to trigger arbitrary outbound HTTP requests by providing a malicious URL via the doc_url parameter during document upload. Attackers can supply URLs pointing to internal network targets, loopback addresses, RFC1918 addresses, or cloud metadata services to cause the server to make requests to internal resources without SSRF mitigations such as private IP filtering or redirect validation.