Known Exploited Vulnerabilities June 26, 2024 · CISA KEV Catalog

CVE-2022-24816: OSGeo Geo Server JAI-EXT Code Injection Vulnerability

OSGeo GeoServer JAI-EXT contains a code injection vulnerability that, when programs use jt-jiffle and allow Jiffle script to be provided via network request, could allow remote code execution.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2022-24816 OSGeo
Related: CVE-2025-58360: OSGeo Geo Server Improper Restriction of XML External Entity Reference Vulnerability Known Exploited Vulnerabilities · Dec 11, 2025
CVE-2024-36401: OSGeo Geo Server Geo Tools Eval Injection Vulnerability Known Exploited Vulnerabilities · Jul 15, 2024
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026