{"id":"GHSA-g628-r368-6vh7","summary":"GeoServer DB2 DataStore Extension has a JNDI Vulnerability via Store Connection","details":"## Summary\n\nAdministrator can perform JNDI attack through specially crafted DB2 jdbc url leading to Remote Code Execution (RCE).\n\n## Impact\n\nIf GeoServer has DB2 extension installed, this vulnerability can lead to executing arbitrary code.\n\n## Details\n\nAuthenticated users can access Vector Data Sources page to creating a new data store through db2 jdbc connection, performing JNDI attack due to unrestricted connection parameters, and then achieve RCE with deserialization of untrusted data.\n\n### Remediation\n\nThis issue has been fixed in this release: https://github.com/geoserver/geoserver/releases/tag/2.27.0.\n\n## References\n\n* https://osgeo-org.atlassian.net/browse/GEOT-7725\n* https://nvd.nist.gov/vuln/detail/cve-2023-27867","aliases":["CVE-2025-27511"],"modified":"2026-07-15T22:00:51.215924098Z","published":"2026-06-11T20:34:00Z","database_specific":{"github_reviewed":true,"github_reviewed_at":"2026-06-11T20:34:00Z","nvd_published_at":"2026-06-18T16:16:50Z","cwe_ids":["CWE-502","CWE-74"],"severity":"HIGH"},"references":[{"type":"WEB","url":"https://github.com/geoserver/geoserver/security/advisories/GHSA-g628-r368-6vh7"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27511"},{"type":"PACKAGE","url":"https://github.com/geoserver/geoserver"},{"type":"WEB","url":"https://github.com/geoserver/geoserver/releases/tag/2.27.0"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/cve-2023-27867"},{"type":"WEB","url":"https://osgeo-org.atlassian.net/browse/GEOT-7725"}],"affected":[{"package":{"name":"org.geoserver.extension:gs-db2","ecosystem":"Maven","purl":"pkg:maven/org.geoserver.extension/gs-db2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/06/GHSA-g628-r368-6vh7/GHSA-g628-r368-6vh7.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"}]}