Security researchers have seen evidence that attackers are attempting to exploit a currently unpatched SQL injection vulnerability in GeoServer, an open-source web server for managing and publishing geospatial data.
A bug bounty hunter shared the vulnerability Wednesday on X as a zero day. According to the post, the jsonArrayContains function contains a vulnerability that allows unauthenticated users to inject SQL commands into the database.
GeoServer vulnerability details
The flaw remains unpatched, and security researchers report signs of attempted exploitation. GeoServer is widely used by organizations across many industries, including the government, defense, science, education, engineering and technology sectors, and has been targeted by hackers in the past.
