← Database

CVE-2025-27511

HIGH CVSS: 7.2 Published: 2026-06-18 Modified: 2026-06-24

Description

GeoServer is an open source server that allows users to share and edit geospatial data. Prior to version 2.27.0 of the GeoServer DB2 DataStore Extension, an administrator can perform a JNDI attack through specially crafted DB2 jdbc url leading to to Remote Code Execution (RCE). Version 2.27.0 fixes the issue.

Affected Platforms

Osgeo Geoserver

Weakness Type

CWE-74, CWE-502

References