Advisories · Technology
core-geonetwork.
Every CVE that names core-geonetwork among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.6 High
Unauthenticated file upload via missing authorization on formatter upload endpoint
- core-geonetwork
- Broken access control
- CVSS 9.1 CriticalCritical · CVSS 9+
GeoNetwork vulnerable to Remote Code Execution via unsafe Saxon XSLT processor configuration in formatter
- core-geonetwork
- Code injection