Server-Side Request Forgery in GeoNetwork Catalog Application
CVE-2026-55864
7.8HIGH
What is CVE-2026-55864?
GeoNetwork is a catalog application designed for managing spatially referenced resources. Prior to the releases of version 4.2.17 and 4.4.12, it was found that the API endpoint /api/tools/ogc/sld allowed attackers to submit arbitrary WMS server URLs. This vulnerability led to potential server-side request forgery, enabling unauthorized access to internal network resources. An attacker could extract sensitive internal data through crafted requests, resulting in information disclosure, authorization bypass, and network reconnaissance capabilities. The issue has been addressed in subsequent releases.
Affected Version(s)
core-geonetwork >= 4.0.0, < 4.2.17 < 4.0.0, 4.2.17
core-geonetwork >= 4.4.0, < 4.4.12 < 4.4.0, 4.4.12