Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

GeoNode is vulnerable to an XML External Entity (XXE) injection #10462

Closed
afabiani opened this issue Dec 21, 2022 · 0 comments
Closed

GeoNode is vulnerable to an XML External Entity (XXE) injection #10462

afabiani opened this issue Dec 21, 2022 · 0 comments
Assignees
@afabiani
Labels
4.0.x 4.1.x master security Pull requests that address a security vulnerability

Comments

@afabiani
Copy link
Member

Issue: XML External Entity (XXE) injection in GeoServer style upload functionality (GHSL-2022-129)
@afabiani afabiani added security Pull requests that address a security vulnerability master 4.1.x labels Dec 21, 2022
@afabiani afabiani self-assigned this Dec 21, 2022
afabiani added a commit that referenced this issue Dec 21, 2022
@afabiani
[Fixes #10462] GeoNode is vulnerable to an XML External Entity (XXE) …
df1409a 
…injection
@afabiani afabiani mentioned this issue Dec 21, 2022
Merged
12 tasks
@afabiani afabiani added the 4.0.x label Dec 21, 2022
github-actions bot pushed a commit that referenced this issue Dec 22, 2022
@afabiani @github-actions
[Fixes #10462] GeoNode is vulnerable to an XML External Entity (XXE) …
76ea202 
…injection (#10463)
github-actions bot pushed a commit that referenced this issue Dec 22, 2022
@afabiani @github-actions
[Fixes #10462] GeoNode is vulnerable to an XML External Entity (XXE) …
2995bd5 
…injection (#10463)
afabiani added a commit that referenced this issue Dec 22, 2022
@github-actions @afabiani
[Fixes #10462] GeoNode is vulnerable to an XML External Entity (XXE) …
fefd6d8 
…injection (#10463) (#10466)

Co-authored-by: Alessio Fabiani <[email protected]>
afabiani added a commit that referenced this issue Dec 22, 2022
@github-actions @afabiani
[Fixes #10462] GeoNode is vulnerable to an XML External Entity (XXE) …
2fdfe91 
…injection (#10463) (#10467)

Co-authored-by: Alessio Fabiani <[email protected]>
afabiani added a commit that referenced this issue Dec 22, 2022
@afabiani
[Fixes #10464] Fix code scanning alert - Uncontrolled data used in pa…
7730729 
…th expression (#10465)

* [Fixes #10462] GeoNode is vulnerable to an XML External Entity (XXE) injection

* [Fixes #10464] Fix code scanning alert - Uncontrolled data used in path expression
github-actions bot pushed a commit that referenced this issue Dec 22, 2022
@afabiani @github-actions
[Fixes #10464] Fix code scanning alert - Uncontrolled data used in pa…
cf9bad7 
…th expression (#10465)

* [Fixes #10462] GeoNode is vulnerable to an XML External Entity (XXE) injection

* [Fixes #10464] Fix code scanning alert - Uncontrolled data used in path expression
github-actions bot pushed a commit that referenced this issue Dec 22, 2022
@afabiani @github-actions
[Fixes #10464] Fix code scanning alert - Uncontrolled data used in pa…
894ef99 
…th expression (#10465)

* [Fixes #10462] GeoNode is vulnerable to an XML External Entity (XXE) injection

* [Fixes #10464] Fix code scanning alert - Uncontrolled data used in path expression
afabiani added a commit that referenced this issue Dec 22, 2022
@github-actions @afabiani
[Fixes #10464] Fix code scanning alert - Uncontrolled data used in pa…
dd1cac4 
…th expression (#10465) (#10468)

* [Fixes #10462] GeoNode is vulnerable to an XML External Entity (XXE) injection

* [Fixes #10464] Fix code scanning alert - Uncontrolled data used in path expression

Co-authored-by: Alessio Fabiani <[email protected]>
afabiani added a commit that referenced this issue Dec 22, 2022
@github-actions @afabiani
[Fixes #10464] Fix code scanning alert - Uncontrolled data used in pa…
3f2f2ef 
…th expression (#10465) (#10469)

* [Fixes #10462] GeoNode is vulnerable to an XML External Entity (XXE) injection

* [Fixes #10464] Fix code scanning alert - Uncontrolled data used in path expression

Co-authored-by: Alessio Fabiani <[email protected]>
alaeddine-farhat pushed a commit to alaeddine-farhat/geonode that referenced this issue Jun 7, 2023
@github-actions @afabiani @alaeddine-farhat
[Fixes GeoNode#10464] Fix code scanning alert - Uncontrolled data use…
f543417 
…d in path expression (GeoNode#10465) (GeoNode#10468)

* [Fixes GeoNode#10462] GeoNode is vulnerable to an XML External Entity (XXE) injection

* [Fixes GeoNode#10464] Fix code scanning alert - Uncontrolled data used in path expression

Co-authored-by: Alessio Fabiani <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@afabiani afabiani

Labels
4.0.x 4.1.x master security Pull requests that address a security vulnerability
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@afabiani