CVE-2024-38524

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://github.com/geoserver/geoserver/pull/8189", "name": "https://github.com/geoserver/geoserver/pull/8189", "tags": [], "refsource": ""}, {"url": "https://github.com/geoserver/geoserver/security/advisories/GHSA-jm79-7xhw-6f6f", "name": "https://github.com/geoserver/geoserver/security/advisories/GHSA-jm79-7xhw-6f6f", "tags": [], "refsource": ""}, {"url": "https://github.com/GeoWebCache/geowebcache/issues/1344", "name": "https://github.com/GeoWebCache/geowebcache/issues/1344", "tags": [], "refsource": ""}, {"url": "https://github.com/GeoWebCache/geowebcache/pull/1345", "name": "https://github.com/GeoWebCache/geowebcache/pull/1345", "tags": [], "refsource": ""}, {"url": "https://osgeo-org.atlassian.net/browse/GEOS-11677", "name": "https://osgeo-org.atlassian.net/browse/GEOS-11677", "tags": [], "refsource": ""}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "GeoServer is an open source server that allows users to share and edit geospatial data. org.geowebcache.GeoWebCacheDispatcher.handleFrontPage(HttpServletRequest, HttpServletResponse) has no check to hide potentially sensitive information from users except for a hidden system property to hide the storage locations that defaults to showing the locations. This vulnerability is fixed in 2.26.2 and 2.25.6."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-200"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2024-38524", "ASSIGNER": "security-advisories@github.com"}}, "impact": {}, "publishedDate": "2025-06-10T15:15Z", "configurations": {"nodes": [], "CVE_data_version": "4.0"}, "lastModifiedDate": "2025-06-10T15:15Z"}