Infinispan

Infinispan

12 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2018-1131

  • EPSS 0.56%
  • Published 15.05.2018 13:29:00
  • Last modified 21.11.2024 03:59:15

Infinispan permits improper deserialization of trusted data via XML and JSON transcoders under certain server configurations. A user with authenticated access to the server could send a malicious object to a cache configured to accept certain types o...

8.8

CVE-2017-15089

  • EPSS 3.91%
  • Published 15.02.2018 17:29:00
  • Last modified 21.11.2024 03:14:02

It was found that the Hotrod client in Infinispan before 9.2.0.CR1 would unsafely read deserialized data on information from the cache. An authenticated attacker could inject a malicious object into the data cache and attain deserialization on the cl...