CVE-2022-24816 OSGeo JAI-EXT
OSGeo GeoServer JAI-EXT contains a code injection vulnerability that, when programs use jt-jiffle and allow Jiffle script to be provided via network request, could allow remote code execution.
- CVSS
- not scored
On CISA’s exploited list
OSGeo GeoServer JAI-EXT Code Injection Vulnerability
- Added
- 2024-06-26
- Federal patch deadline
- 2024-07-17
- Ransomware use
- not known