OSGeo GeoServer: GeoServer Improper Restriction of XML External Entity Reference Vulnerability ยท updates https://pwn.watch/i/osgeo-geoserver-cve-2025-58360 OSGeo GeoServer contains an improper restriction of XML external entity reference vulnerability that occurs when the application accepts XML input through a specific endpoint /geoserver/wms operation GetMap and could allow an attacker to define external entities within the XML request. Added to CISA KEV on 2025-12-11. en Thu, 11 Dec 2025 00:00:00 GMT OSGeo GeoServer: GeoServer Improper Restriction of XML External Entity Reference Vulnerability: CISA added CVE-2025-58360 to the KEV catalog (due 2026-01-01). https://pwn.watch/i/osgeo-geoserver-cve-2025-58360 https://pwn.watch/i/osgeo-geoserver-cve-2025-58360#2025-12-11-9451a4e2 Thu, 11 Dec 2025 00:00:00 GMT high <p>OSGeo GeoServer: GeoServer Improper Restriction of XML External Entity Reference Vulnerability: CISA added CVE-2025-58360 to the KEV catalog (due 2026-01-01).</p>