Yüksek CVSS 8.8
CVE-2026-33050: CVE-2026-33050: işletim sistemi komut enjeksiyonu
Açıklama (NVD)
GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data. Prior to 5.1.0, a crafted vector file layer name supplied during upload allows a low-privileged remote user to inject shell syntax and execute arbitrary operating-system commands on the GeoNode server. This issue is fixed in version 5.1.0.
Özet bilgiler
- CVSS v3.1
- 8.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CWE
- CWE-78
- Yama
- Yok / bilinmiyor