A bug has been found in GeoServer that exposes the parts of the filesystem that are accessible to the servlet container (Tomcat, Jetty, etc.).
All users are strongly encouraged to upgrade to GeoServer 1.6.2a:http://sourceforge.net/project/showfiles.php?group_id=25086&package_id=129885 - http://sourceforge.net/project/showfiles.php?group_id=25086&package_id=129885
(Ignore any version mismatches, as long as the WAR , .bin or .exe you are downloading is named 1.6.2a)
If you cannot upgrade immediately you should disable the demo system. Instructions can be found here:http://geoserver.org/display/GEOS/Security+issue+-+Disable+demoRequest - http://geoserver.org/display/GEOS/Security+issue+-+Disable+demoRequest
Highest
HighestHighest
A bug has been found in GeoServer that exposes the parts of the filesystem that are accessible to the servlet container (Tomcat, Jetty, etc.).
All users are strongly encouraged to upgrade to GeoServer 1.6.2a:
http://sourceforge.net/project/showfiles.php?group_id=25086&package_id=129885 - http://sourceforge.net/project/showfiles.php?group_id=25086&package_id=129885
(Ignore any version mismatches, as long as the WAR , .bin or .exe you are downloading is named 1.6.2a)
If you cannot upgrade immediately you should disable the demo system. Instructions can be found here:
http://geoserver.org/display/GEOS/Security+issue+-+Disable+demoRequest - http://geoserver.org/display/GEOS/Security+issue+-+Disable+demoRequest