VULNERABILITY INTELLIGENCE

CVE-2026-53573

EPSS probability0.65%
CISA KEVNot currently listed
Published2026-07-31
Last modified2026-10-23

Description

GeoNetwork is a catalog application to manage spatially referenced resources. From 3.12.0 until 4.2.16 and 4.4.11, unsafe redirect validation in GeonetworkOAuth2LoginAuthenticationFilter and KeycloakAuthenticationProcessingFilter permits an attacker-controlled external redirect after login. This issue is fixed in versions 4.2.16 and 4.4.11.

Weakness classification

  • security-advisories@github.com: CWE-601

Primary references