Yüksek CISA KEV
CVE-2022-24816: OSGeo JAI-EXT: aktif olarak istismar edilen açık
Açıklama (NVD)
OSGeo GeoServer JAI-EXT contains a code injection vulnerability that, when programs use jt-jiffle and allow Jiffle script to be provided via network request, could allow remote code execution.
Özet bilgiler
- EPSS
- %99,93 (yüzdelik 100)
- Yama
- Yok / bilinmiyor
- KEV
- Eklenme: 2024-06-26 · Son tarih: 2024-07-17
Gerekli aksiyon: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.