Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.infinispan/infinispan-core@10.1.4.Final
purl pkg:maven/org.infinispan/infinispan-core@10.1.4.Final
Next non-vulnerable version 11.0.6.Final
Latest non-vulnerable version 15.0.0.Dev07
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-f2rc-7h94-wyhb
Aliases:
CVE-2020-25711
GHSA-8674-26jc-wh98
Missing Authorization A flaw was found in infinispan 10 REST API, where authorization permissions are not checked while performing some server management operations. When authz is enabled, any user with authentication can perform operations like shutting down the server without the ADMIN role.
11.0.6.Final
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T21:39:00.430490+00:00 GitLab Importer Affected by VCID-f2rc-7h94-wyhb https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.infinispan/infinispan-core/CVE-2020-25711.yml 38.4.0
2026-04-11T22:54:10.387420+00:00 GitLab Importer Affected by VCID-f2rc-7h94-wyhb https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.infinispan/infinispan-core/CVE-2020-25711.yml 38.3.0
2026-04-02T23:03:21.325785+00:00 GitLab Importer Affected by VCID-f2rc-7h94-wyhb https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.infinispan/infinispan-core/CVE-2020-25711.yml 38.1.0
2026-04-01T17:22:16.206360+00:00 GitLab Importer Affected by VCID-f2rc-7h94-wyhb https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.infinispan/infinispan-core/CVE-2020-25711.yml 38.0.0