@shadowserver.bsky.social on Bluesky

JavaScript RequiredThis is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is. Learn more about Bluesky at bsky.social and atproto.com.

Post

The Shadowserver Foundation

shadowserver.bsky.social

did:plc:3xyh2kw5hfxsax4zff3pp5ub

CISA has added GeoServer CVE-2024-36401 to its Known Exploited Vulnerability Catalog https://cisa.gov/news-events/alerts/2024/07/15/cisa-adds-one-known-exploited-vulnerability-catalog We first observed CVE-2024-36401 "POST /geoserver/wfs" exploitation July 9th in our sensors. If you use GeoServer, check for signs of compromise & patch https://github.com/geoserver/geoserver/security/advisories/GHSA-6jj6-gm7p-fcvv

2024-07-16T17:34:14.884Z