rxerium/cve-2025-58360Passive detection for CVE-2025-58360
CVE-2025-58360The vulnerability in question is CVE-2025-58360 (CVSS score: 8.2), an unauthenticated XML External Entity (XXE) flaw that affects all versions prior to and including 2.25.5, and from versions 2.26.0 through 2.26.1. It has been patched in versions 2.25.6, 2.26.2, 2.27.0, 2.28.0, and 2.28.1. Artificial intelligence (AI)-powered vulnerability discovery platform XBOW has been acknowledged for reporting the issue.
How does this detection method work?This script checks headers for the last updated date and it will match on anything updated before November 28, 2025 as per the vendor advisory: https://www.cyber.gc.ca/en/alerts-advisories/geoserver-security-advisory-av25-789
How do I run this script?
nuclei -u <ip|fqdn> -t template.yaml
Or if you would like to scan a list of hosts, execute:
nuclei -l <list.txt> -t template.yaml
References
DisclaimerUse at your own risk, I will not be responsible for illegal activities you conduct on infrastructure you do not own or have permission to scan.
LicenseThis project is licensed under the MIT License.
ContactIf you have any questions about this vulnerability detection script please reach out to me via Signal.