GE
Product
Geonetwork
4
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 2Low 0
Watch
Add Geonetwork to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-28398 | 7.2 | Sep 5 | A privileged attacker in GeoNetwork before 3.12.0 and 4.x before 4.0.4 can use the directory harvester before-script to execute arbitrary OS commands remotely on the hosting… Affected: 3.4.0 before 3.12.0; 4.0.0 before 4.0.4; 4.0.0; 4.0.0 |
Showing 1