Firetruck

CVE-2022-24816

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

OSGeo GeoServer JAI-EXT contains a code injection vulnerability that, when programs use jt-jiffle and allow Jiffle script to be provided via network request, could allow remote code execution.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
jai-extgeosolutionsgroup / jai-ext>= 0, < 1.1.22affected
jai-extgeosolutions-it / jai-ext< 1.1.22affected