SERVER-WEBAPP GeoServer WFS remote code execution attempt

Description

Detects an attempt to exploit CVE-2024-36401, a remote code execution flaw that can run code on the server in GeoServer WFS. The flaw saw mass exploitation against internet-facing GeoServer instances.

CVEs

References

• github.com →