CVE-2021-40822: OSGeo GeoServer

High severity, CVSS 7.5. EPSS: 19.3% chance of exploitation in the next 30 days.

GeoServer through 2.18.5 and 2.19.x through 2.19.2 allows SSRF via the option for setting a proxy host.

Affected products

• OSGeo GeoServer: up to and including 2.18.5; from 2.19.0, before 2.19.3 (fixed in 2.19.3)

Published 2022-05-02. Last modified 2026-06-17.