Dashboard / CVE-2026-55649

CVE-2026-55649

MEDIUM
MEDIUM Priority: 0.02 BB Relevance: 53/100
Published: 2026-11-06 Modified: 2026-11-09 First seen: 2026-11-06 Status: active

Attack Surface

Network Low Complexity Conf. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: Required
S: Unchanged
C: High
I: Low
A: None

Description

GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data. Prior to 5.0.3, document abstract metadata is stored without sanitization, allowing a low-privileged remote user to persist arbitrary HTML and JavaScript that executes in another user's browser when the document page is visited. This issue is fixed in version 5.0.3.

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
GeoNode geonode < 5.0.3
GeoNode geonode < 5.0.3

References & Advisories (6)

Bug Bounty Relevance

53 / 100
✓ Network accessible
✓ Low complexity

CVSS Score

6.3 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N

EPSS — Exploitation Probability

0.32%
Raw Score 0.003170
Percentile 25.0%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00317
2026-11-12
0.00317
2026-11-10
0.00317
2026-11-09
0.00317
2026-11-08
0.00317
2026-11-07
0.00317

Intelligence Sources

mitre ref →
nvd ref →

External Links