CVE-2022-24816

OSGeo GeoServer JAI-EXT Code Injection Vulnerability

10.0
CVSS 3.1
99.9 %
EPSS (current)
2024-06-26
KEV addition
No
Ransomware

Timeline

Publication, first public exploit and KEV addition on a day axis.

Key facts

Vendor / product: OSGeo / JAI-EXT

Published: 2022-04-13 · Due (CISA): 2024-07-17

CWE: CWE-94 · EU list: no

Exploit references (metadata only)

SourceReferenceTitleDate
nucleihttp/cves/2022/CVE-2022-24816.yamlGeoServer <1.2.2 - Remote Code Execution–

References only — no downloads or instructions.

Sources