CVE-2026-76904
CRITICAL
9,8
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
Description
AI Translation Available
GeoTools is an open source Java library that provides tools for geospatial data. Starting in version 30.5 and prior to versions 33.6, 34.5, and 33.6, an SQL Injection Vulnerability is present when executing OGC Filters with PostGIS DataStore implementation: `jsonArrayContains` function; Requires PostGIS 12 or greater with a String or JSON field. For PostGIS 12 and greater `jsonArrayContains(<column>, <pointer>, <value>)` function writes `<value>` into generated SQL without escaping. Patches are available in versions 33.6, 34.5, and 33.6. No known workaround is available. To limit scope of SQL Injection the PostGIS connection pool should be configured with limited rights.
89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
StableCommon Consequences
Security Scopes Affected:
Confidentiality
Integrity
Availability
Authentication
Access Control
Potential Impacts:
Execute Unauthorized Code Or Commands
Read Application Data
Gain Privileges Or Assume Identity
Bypass Protection Mechanism
Modify Application Data
Applicable Platforms
Languages:
Not Language-Specific, SQL
Technologies:
Database Server
https://github.com/geotools/geotools/commit/d821c4d321dd91c22e31fcd5b1ce676645d…
https://github.com/geotools/geotools/pull/5829
https://github.com/geotools/geotools/releases/tag/33.6
https://github.com/geotools/geotools/releases/tag/34.5
https://github.com/geotools/geotools/releases/tag/35.1
https://github.com/geotools/geotools/security/advisories/GHSA-mqjf-5f49-2fjh
https://osgeo-org.atlassian.net/browse/GEOT-7589
https://osgeo-org.atlassian.net/browse/GEOT-7958
https://osgeo-org.atlassian.net/browse/GEOT-7959