CVE-2023-25158
1 advisory.
Maven/org.geotools:gt-jdbc CVE-2023-25158: critical 9.8
GeoTools OGC Filter SQL Injection Vulnerabilities
Action: Upgrade org.geotools:gt-jdbc to 24.7 (24.x), 25.7 (25.x), 26.7 (26.x), 27.4 (27.x) or 28.2 (28.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 28.0 | 28.2 | - |
| 27.0 | 27.4 | - |
| 26.0 | 26.7 | - |
| 25.0 | 25.7 | - |
| 0 | 24.7 | - |
Fixed versions
| 28.2 | 27.4 | 26.7 | 25.7 | 24.7 |
Sources
- osv: GHSA-99c3-qc2q-p94m
- https://github.com/geotools/geotools/security/advisories/GHSA-99c3-qc2q-p94m
- https://nvd.nist.gov/vuln/detail/CVE-2023-25158
- https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b
- https://github.com/geotools/geotools
CVE-2023-25158 · published · modified · JSON