{"id":"CVE-2023-35042","published":"2023-06-12T00:00:00Z","modified":"2024-11-27T15:06:46Z","title":"GeoServer 2, in some configurations, allows remote attackers to execute arbitrary code via…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"GeoServer 2, in some configurations, allows remote attackers to execute arbitrary code via java.lang.Runtime.getRuntime().exec in wps:LiteralData within a wps:Execute request, as exploited in the wild in June 2023. NOTE: the vendor states that they are unable to reproduce this in any version.","provenance":"source","from":"CVE.org"},"summary":null,"cvss":null,"epss":{"score":0.44825,"percentile":0.98771,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2023-06-12","exploitedFirstSeen":"2023-06-12","ransomware":false,"evidence":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-35042","date":"2023-06-12"},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-35042","date":"2023-06-12"},{"url":"https://1665891.fs1.hubspotusercontent-na1.net/hubfs/1665891/Threat%20reports/AquaSecurity_Kinsing_Demystified_Technical_Guide.pdf","date":"2024-05-10"}],"evidenceTotal":3,"provenance":"source"},"exploited":true,"otx":{"pulseCount":1,"pulses":[{"name":"GitHub - nautilus-aqua/Kinsing-Indication-of-Compromise: This repo contains indication of compromise of Kinsing threat actor that were collected over a period of few years","url":"https://otx.alienvault.com/pulse/67ba26921050c137f83c3b8d","created":"2025-02-22"}],"provenance":"machine"},"cwes":[],"references":[{"url":"https://isc.sans.edu/diary/29936","tags":[]},{"url":"https://docs.geoserver.org/stable/en/user/services/wps/operations.html#execute","tags":[]}],"techniques":[],"reports":[],"affected":[{"ecosystem":"Maven","package":"org.geoserver:gs-wms","vulnerableRanges":["<2.18.6",">=2.19.0, <2.19.6",">=2.20.0, <2.20.4"],"patched":["2.18.6","2.19.6","2.20.4"],"from":["GHSA-59x6-g4jr-4hxc"],"provenance":"source"},{"ecosystem":"Maven","package":"org.geoserver:gs-wfs","vulnerableRanges":["<2.18.6",">=2.19.0, <2.19.6",">=2.20.0, <2.20.4"],"patched":["2.18.6","2.19.6","2.20.4"],"from":["GHSA-59x6-g4jr-4hxc"],"provenance":"source"},{"ecosystem":"Maven","package":"org.geoserver:gs-wps","vulnerableRanges":["<2.18.6",">=2.19.0, <2.19.6",">=2.20.0, <2.20.4"],"patched":["2.18.6","2.19.6","2.20.4"],"from":["GHSA-59x6-g4jr-4hxc"],"provenance":"source"}],"advisories":[{"id":"GHSA-59x6-g4jr-4hxc","url":"https://github.com/advisories/GHSA-59x6-g4jr-4hxc","severity":"CRITICAL","ecosystem":"Maven","package":"org.geoserver:gs-wms","vulnerableRanges":["<2.18.6"],"patched":["2.18.6"],"provenance":"source","from":"GHSA"},{"id":"GHSA-59x6-g4jr-4hxc","url":"https://github.com/advisories/GHSA-59x6-g4jr-4hxc","severity":"CRITICAL","ecosystem":"Maven","package":"org.geoserver:gs-wfs","vulnerableRanges":["<2.18.6"],"patched":["2.18.6"],"provenance":"source","from":"GHSA"},{"id":"GHSA-59x6-g4jr-4hxc","url":"https://github.com/advisories/GHSA-59x6-g4jr-4hxc","severity":"CRITICAL","ecosystem":"Maven","package":"org.geoserver:gs-wms","vulnerableRanges":[">=2.19.0, <2.19.6"],"patched":["2.19.6"],"provenance":"source","from":"GHSA"},{"id":"GHSA-59x6-g4jr-4hxc","url":"https://github.com/advisories/GHSA-59x6-g4jr-4hxc","severity":"CRITICAL","ecosystem":"Maven","package":"org.geoserver:gs-wfs","vulnerableRanges":[">=2.19.0, <2.19.6"],"patched":["2.19.6"],"provenance":"source","from":"GHSA"},{"id":"GHSA-59x6-g4jr-4hxc","url":"https://github.com/advisories/GHSA-59x6-g4jr-4hxc","severity":"CRITICAL","ecosystem":"Maven","package":"org.geoserver:gs-wms","vulnerableRanges":[">=2.20.0, <2.20.4"],"patched":["2.20.4"],"provenance":"source","from":"GHSA"},{"id":"GHSA-59x6-g4jr-4hxc","url":"https://github.com/advisories/GHSA-59x6-g4jr-4hxc","severity":"CRITICAL","ecosystem":"Maven","package":"org.geoserver:gs-wfs","vulnerableRanges":[">=2.20.0, <2.20.4"],"patched":["2.20.4"],"provenance":"source","from":"GHSA"},{"id":"GHSA-59x6-g4jr-4hxc","url":"https://github.com/advisories/GHSA-59x6-g4jr-4hxc","severity":"CRITICAL","ecosystem":"Maven","package":"org.geoserver:gs-wps","vulnerableRanges":["<2.18.6"],"patched":["2.18.6"],"provenance":"source","from":"GHSA"},{"id":"GHSA-59x6-g4jr-4hxc","url":"https://github.com/advisories/GHSA-59x6-g4jr-4hxc","severity":"CRITICAL","ecosystem":"Maven","package":"org.geoserver:gs-wps","vulnerableRanges":[">=2.19.0, <2.19.6"],"patched":["2.19.6"],"provenance":"source","from":"GHSA"},{"id":"GHSA-59x6-g4jr-4hxc","url":"https://github.com/advisories/GHSA-59x6-g4jr-4hxc","severity":"CRITICAL","ecosystem":"Maven","package":"org.geoserver:gs-wps","vulnerableRanges":[">=2.20.0, <2.20.4"],"patched":["2.20.4"],"provenance":"source","from":"GHSA"}],"euvd":{"id":"EUVD-2023-1696","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-1696","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2023-06-12","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2023-35042","provenance":"source"},{"date":"2023-06-12","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-35042","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":55.4,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 1235 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.75,"detail":"percentile 0.9877"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.68,"detail":"1 pulse"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]},"lineage":{"packageHistory":[{"cve":"CVE-2023-35042","published":"2023-06-12","fixed":"2.20.4","kev":false},{"cve":"CVE-2023-41339","published":"2023-10-24","fixed":"2.23.2","kev":false,"link":{"from":"CVE-2023-35042","to":"CVE-2023-41339","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.geoserver:gs-wms","fromFixed":"2.20.4","toFixed":"2.22.5","daysApart":134}]}},{"cve":"CVE-2024-23642","published":"2024-03-20","fixed":"2.24.1","kev":false},{"cve":"CVE-2024-23818","published":"2024-03-20","fixed":"2.24.1","kev":false},{"cve":"CVE-2024-36401","published":"2024-07-01","fixed":"2.25.2","kev":true,"link":{"from":"CVE-2023-35042","to":"CVE-2024-36401","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.geoserver:gs-wfs","fromFixed":"2.20.4","toFixed":"2.22.6","daysApart":385}]}}],"package":"Maven:org.geoserver:gs-wms"}}