CISA Identifies Actively Exploited GeoServer XXE Vulnerability in Updated KEV Catalog
On Thursday, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced the addition of a critical vulnerability found in OSGeo GeoServer to its Known Exploited Vulnerabilities (KEV) catalog, following reports of its active exploitation. This serious security flaw is identified…