VULNRABLE / Vulnerability / CVE-2025-58175

CVE-2025-58175

MEDIUM org.geoserver.web:gs-web-app GHSA

CVSS Score

5.5

Severity

MEDIUM

EPSS

Source

GHSA

Summary

GeoServer has a Server-Side Request Forgery (SSRF) Vulnerability in its XML Entity Resolution

What this means

CVE-2025-58175 is a medium-severity vulnerability affecting org.geoserver.web:gs-web-app, rated CVSS 5.5. The EPSS model estimates a 0% probability of exploitation in the next 30 days. Published June 12, 2026.

View full advisory at GHSA →