Back to the CVE list
CVE-2025-58360 CISA KEV · Actively exploited

XML external entity injection in Geoserver

CVSS score

9.8

EPSS probability

%60.0

Risk score

11.8

Published

10 mo ago

OverviewPublic Exploits (6)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
B1ack4sh/Blackash-CVE-2025-58360
GitHub

CVE-2025-58360 (★0)

Public PoCSource updated: 27.11.2025 02:59:56
G
carlzhang123/Blackash-CVE-2025-58360
GitHub

CVE-2025-58360 (★0)

Public PoCSource updated: 27.11.2025 09:47:42
G
quyenheu/CVE-2025-58360
GitHub

XXE through a specific endpoint /geoserver/wms operation GetMap - Geoserver (★0)

Public PoCSource updated: 27.11.2025 17:59:13
G
rxerium/CVE-2025-58360
GitHub

Passive detection for CVE-2025-58360 (★0)

Public PoCSource updated: 12.12.2025 15:35:48
G
quyenheu/Bypass-CVE-2025-58360
GitHub

A new way to exploit CVE-2025-58360 bypass WAF (★0)

Public PoCSource updated: 31.12.2025 12:55:16
N
projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-58360.yaml
Nuclei

Nuclei: GeoServer - XML External Entity Injection

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-58360"