Recent GeoServer Vulnerability Exploited in Attacks

Back Feeds.Feedburner

Recent GeoServer Vulnerability Exploited in Attacks

Feeds.Feedburner •Ionut Arghire • December 12, 2025

Share: View original

Because user input is not sufficiently sanitized, attackers could exploit the flaw to define external entities within an XML request.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

GeoServer XXE Vulnerability Exploited in Cyber Attacks A recently discovered vulnerability in GeoServer, identified as CVE-2025-58360, allows attackers to exploit insufficiently sanitized user input to define external entities within XML requests. This flaw has been actively exploited in cyber attacks, affecting users of the GeoServer platform. 3 sources 36

Extracted Entities

Platforms (1)