CVE-2023-43795
Published: 25 October 2023
Summary
CVE-2023-43795 is a high-severity SSRF (CWE-918) vulnerability in Osgeo Geoserver. Its CVSS base score is 8.6 (High).
Operationally, ranked in the top 0.4% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
GeoServer is an open source Java server for sharing and editing geospatial data that is affected by a Server Side Request Forgery vulnerability in its OGC Web Processing Service implementation. The WPS specification accepts arbitrary GET and POST requests, enabling the flaw tracked as CWE-918 and carrying a CVSS 3.1 score of 8.6.
An unauthenticated remote attacker can send crafted requests to induce the server into issuing outbound connections to internal or external resources, resulting in disclosure of sensitive data together with limited integrity and availability effects.
The published GitHub security advisory states that the issue has been fixed in GeoServer releases 2.22.5 and 2.23.2.
The associated EPSS score stands at 0.8949 with no material rise after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-2659
Vulnerability details
GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. The OGC Web Processing Service (WPS) specification is designed to process information from any server using GET and POST requests. This…
more
presents the opportunity for Server Side Request Forgery. This vulnerability has been patched in version 2.22.5 and 2.23.2.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Penetration testing attempts server-side requests to internal resources, identifying SSRF weaknesses for remediation.
Outbound connections to external resources can be monitored and limited at the boundary, reducing SSRF impact.
Validates server-side URLs and resource references to block SSRF attempts.
Detects server-side request forgery through monitoring of unexpected outbound connections.