.. / CVE-2021-40822

• SSRF
• Nuclei
• Web

Exploit for Geoserver - Server-Side Request Forgery (CVE-2021-40822)

Description:

GeoServer through 2.18.5 and 2.19.x through 2.19.2 allows server-side request forgery via the option for setting a proxy host.

Nuclei Template

View the template here CVE-2021-40822.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-40822.yaml

References: