https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T04:52:54.089961+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-40017 CVE-2023-40017 — Geonode Server Side Request Forgery vulnerability 2026-10-07T04:52:54.091719+00:00

Affected: geonode, geosolutionsgroup geonode

GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data. In versions 3.2.0 through 4.1.2, the endpoint `/proxy/?url=` does not properly protect against server-side request forgery. This allows an attacker to port scan internal hosts and request information from internal hosts. A patch is available at commit a9eebae80cb362009660a1fd49e105e7cdb499b9.

 https://cve.radiocsirt.org/vuln/ghsa-rmxg-6qqf-x8mr GHSA-rmxg-6qqf-x8mr — GeoNode Server Side Request forgery 2026-10-07T04:52:54.091783+00:00

Affected: PyPI: geonode

### Summary A server side request forgery vuln was found within geonode when testing on a bug bounty program. Server side request forgery allows a user to request information on the internal service/services.

### Details The endpoint /proxy/?url= does not properly protect against SSRF. when using the following format you can request internal hosts and display data. /proxy/?url=http://169.254.169.254\@whitelistedIPhere. This will state wether the AWS internal IP is alive. If you get a 404, the host is alive. A non alive host will not display a response. To display metadata, use a hashfrag on the url /proxy/?url=http://169.254.169.254\@#whitelisteddomain.com or try /proxy/?url=http://169.254.169.254\@%23whitelisteddomain.com

### Impact Port scan internal hosts, and request information from internal hosts.