{"action":"Upgrade org.geoserver.web:gs-web-sec-core to 2.26.4 (2.26.x) or 2.27.3 (2.27.x) or later.","affected":[{"fixed":"2.27.3","introduced":"2.27.0"},{"fixed":"2.26.4","introduced":"0"}],"component":"org.geoserver.web:gs-web-sec-core","cve_ids":["CVE-2025-52465"],"ecosystem":"Maven","epss":0.00616,"exploited":false,"fixed_versions":["2.27.3","2.26.4"],"ghsa_id":"GHSA-7qmg-grcp-qf25","id":"tcs_01M5N8JZF1A0J71KCJF2YRBEHY","modified_at":"2026-07-15T22:00:51.269104751Z","published_at":"2026-06-12T18:23:28Z","references":["https://osv.dev/vulnerability/GHSA-7qmg-grcp-qf25","https://github.com/geoserver/geoserver/security/advisories/GHSA-7qmg-grcp-qf25","https://nvd.nist.gov/vuln/detail/CVE-2025-52465","https://github.com/geoserver/geoserver/pull/8584","https://github.com/geoserver/geoserver","https://osgeo-org.atlassian.net/browse/GEOS-11852","https://research.checkpoint.com/2025/cve-2025-24054-ntlm-exploit-in-the-wild"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-7qmg-grcp-qf25#Maven/org.geoserver.web:gs-web-sec-core","url":"https://osv.dev/vulnerability/GHSA-7qmg-grcp-qf25"}],"summary":"GeoServer has an arbitrary file write vulnerability in its Master Password Dump Page"}