Unsafe Redirect Validation in GeoNetwork Catalog Application
CVE-2026-53573
What is CVE-2026-53573?
The GeoNetwork catalog application is exposed to a vulnerability arising from insufficient validation of external redirects within its authentication filters. Specifically, the GeonetworkOAuth2LoginAuthenticationFilter and KeycloakAuthenticationProcessingFilter can allow attackers to manipulate redirections post-login, potentially leading users to malicious sites. This flaw affects versions ranging from 3.12.0 to 4.2.16 and 4.4.11. It is crucial for users running these versions to upgrade to at least 4.2.16 or 4.4.11, where the issue has been patched. For more details, please refer to the security advisory on GitHub.
Affected Version(s)
core-geonetwork >= 3.12.0, <= 3.12.12 <= 3.12.0, 3.12.12
core-geonetwork >= 4.0.0-alpha.1, <= 4.0.6 <= 4.0.0-alpha.1, 4.0.6
core-geonetwork >= 4.2.0, < 4.2.16 < 4.2.0, 4.2.16