CyberRota Analysis
AI-GeneratedGeoNetwork versions prior to 4.4.12 and 4.2.17 are vulnerable due to the Saxon XSLT processor being improperly configured, allowing attackers to execute arbitrary OS commands through crafted XSL stylesheets. This critical vulnerability can be exploited by users with sufficient privileges to upload formatters, leading to potential system compromise. Organizations using affected versions of GeoNetwork should prioritize updating to the patched versions to mitigate this severe risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.12 and 4.2.17, the Saxon XSLT processor used to render formatters is configured without secure processing (`FEATURE_SECURE_PROCESSING`) and without disabling Java extension functions (`ALLOW_EXTERNAL_FUNCTIONS`). Any stylesheet loaded by GeoNetwork can therefore invoke `java.lang.Runtime.exec()` or `java.lang.ProcessBuilder` directly, achieving arbitrary command execution as the GeoNetwork process user. A user with sufficient privileges to upload a formatter can deliver a `.xsl` file containing Java extension call that execute arbitrary OS commands with the privileges of the GeoNetwork process. The issue is patched in GeoNetwork versions 4.4.12 and 4.2.17.