5.3

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2024-38524

CVE-2024-38524: GWC Home Page communicate version and revision information

Summary

The GeoWebCache home page includes version and revision information about the software in use. This information is sensitive from a security point of view because it allows software used by the server to be easily identified.

Details

org.geowebcache.GeoWebCacheDispatcher.handleFrontPage(HttpServletRequest, HttpServletResponse) has no check to hide potentially sensitive information from users except for a hidden system property to hide the storage locations that defaults to showing the locations.

PoC

Just open http://localhost:8080/geoserver/gwc/

Impact

In addition to exposing the version and revision information, the home page will expose the config file and storage locations which may expose the system's temp directory location and whether or not GeoServer is running in a Windows operating system. The approximate server start time and some basic GWC usage information is also exposed.

References

https://osgeo-org.atlassian.net/browse/GEOS-11677 https://github.com/geoserver/geoserver/pull/8189 https://github.com/GeoWebCache/geowebcache/issues/1344 https://github.com/GeoWebCache/geowebcache/pull/1345

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2024-38524

CVE-2024-38524:

5.3

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
org.geoserver.web:gs-web-app	maven	>= 2.26.0, < 2.26.2	2.26.2
org.geoserver.web:gs-web-app	maven	< 2.25.6	2.25.6
org.geoserver:gs-gwc	maven	>= 2.26.0, < 2.26.2	2.26.2
org.geoserver:gs-gwc	maven	< 2.25.6	2.25.6

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in the GeoWebCache home page exposing sensitive system information (version, build, runtime statistics, storage locations) to unauthenticated users. The primary function responsible for generating this page and including this information is org.geowebcache.GeoWebCacheDispatcher.handleFrontPage. The analysis of commit ac0a112ae0e1b60c4dd95c985abc47398b033722 in the GeoWebCache/geowebcache repository clearly shows that the handleFrontPage method was modified to conditionally display this information only if the user is an administrator (isAdmin check). Before this change, the information was appended to the response string unconditionally. The description of the vulnerability explicitly names org.geowebcache.GeoWebCacheDispatcher.handleFrontPage(HttpServletRequest, HttpServletResponse) as the function lacking checks. The patch directly addresses this by adding an administrative check before revealing the sensitive details. The related changes in SecurityDispatcher.java and SecurityFilter.java (in GeoWebCache) and GeoServerSecurityFilter.java (in GeoServer, commit be19f52982be5cf1f6b74672d4f199b69ece8590) are part of the mitigation to correctly implement the isAdmin check, but the vulnerable code that exposed the information was within handleFrontPage.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

5.3

-

Basic Information

Basic Information

Concerned about an active attack path?

CVE-2024-38524: GWC Home Page communicate version and revision information

Summary

Details

PoC

Impact

References

CVE-2024-38524:

5.3

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

5.3

5.3

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

CVE-2024-38524: GWC Home Page communicate version and revision information

Summary

Details

PoC

Impact

References

Technical Details

Basic Information

Basic Information

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI