cbcvebase.

Red Hat Inc Infinispan vulnerabilities

1 known vulnerability affecting red_hat_inc/infinispan.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2018-1131P3HIGHCVSS 8.8v9.0.3.Finalv9.1.7.Final+3 more2018-05-15
CVE-2018-1131 [HIGH] CWE-349 CVE-2018-1131: Infinispan permits improper deserialization of trusted data via XML and JSON transcoders under certa Infinispan permits improper deserialization of trusted data via XML and JSON transcoders under certain server configurations. A user with authenticated access to the server could send a malicious object to a cache configured to accept certain types of objects, achieving code execution and possible further attacks. Versions 9.0.3.Final, 9.1.7.Final, 8.2.
nvd