Security Advisory

CVE-2026-53573

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-31 22:16:25

Last updated 2026-07-31 22:16:25

Assigner GitHub_M

CVSS score not scored

State PUBLISHED

Description

GeoNetwork is a catalog application to manage spatially referenced resources. From 3.12.0 until 4.2.16 and 4.4.11, unsafe redirect validation in GeonetworkOAuth2LoginAuthenticationFilter and KeycloakAuthenticationProcessingFilter permits an attacker-controlled external redirect after login. This issue is fixed in versions 4.2.16 and 4.4.11.

← Browse all CVEs View on cve.org ↗