漏洞描述
GeoServer through 2.18.5 and 2.19.x through 2.19.2 allows server-side request forgery via the option for setting a proxy host.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
gccybermonks.comhttps://gccybermonks.com/posts/cve-2021-40822/↗github.comhttps://github.com/geoserver/geoserver/compare/2.19.2...2.19.3↗github.comhttps://github.com/geoserver/geoserver/releases↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2021-40822↗osgeo-org.atlassian.nethttps://osgeo-org.atlassian.net/browse/GEOS-10229↗