CVE-2022-50899 | BDVDB-2026-310102 Detail

Description#

Geonetwork 3.10 through 4.2.0 contains an XML external entity vulnerability in PDF rendering that allows attackers to retrieve arbitrary files from the server. Attackers can exploit the insecure XML parser by crafting a malicious XML document with external entity references to read system files through the baseURL parameter in PDF creation requests.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-01-13Record published in the CVE List.
2. Version 22026-05-14Most recent update recorded in the CVE List.