CVE-2025-58360: GeoServer XXE Vulnerability Analysis

Reddit •/u/Fit_Wing3352 • November 28, 2025

Share: View original

submitted by /u/Fit_Wing3352 [link] [ ]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

GeoServer XXE Vulnerability Exploited in Cyber Attacks A recently discovered vulnerability in GeoServer, identified as CVE-2025-58360, allows attackers to exploit insufficiently sanitized user input to define external entities within XML requests. This flaw has been actively exploited in cyber attacks, affecting users of the GeoServer platform. 3 sources 36

Extracted Entities

CVEs (1)

Platforms (1)

Vulnerabilities (1)