CVE-2022-50899 | GeoNetwork up to 4.2.0 XML Parser baseURL xml external entity reference (Exploit 50982 / EDB-50982)

January 14, 2026 Yanac

A vulnerability was found in GeoNetwork up to 4.2.0 and classified as problematic. This issue affects some unknown processing of the component XML Parser. Executing a manipulation of the argument baseURL can lead to xml external entity reference.

This vulnerability is registered as CVE-2022-50899. It is possible to launch the attack remotely. Furthermore, an exploit is available.VulDB Recent EntriesRead More