GeoServer zero-day vulnerability capable of remote code execution actively exploited

Active exploitation attempts against an unpatched GeoServer SQL injection zero-day were observed within hours of its disclosure. Under certain configurations, the vulnerability can lead to remote code execution. GeoServer has released fixed versions 3.0.1, 2.28.5, and 2.27.6.