geOrchestra GeoNetwork 4.4.11-01 is now available.
This is a patched version of the official / usptream 4.4.11 release, in order to fix a security vulnerability prior to upstream release.
The geOrchestra PSC strongly recommends to upgrade to this version. If you are unable to bump, consider blocking the following endpoint onto your front webserver (the '*' is a wildcard):
POST /geonetwork/*/api/formatters
📝 Changes
Change-log: View GeoNetwork 4.4.11 documentation