Search for packages
| purl | pkg:maven/org.infinispan/infinispan-core@10.0.0.Alpha2 |
| Next non-vulnerable version | 14.0.25.Final |
| Latest non-vulnerable version | 15.0.0.Dev07 |
| Risk score | 3.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-8674-26jc-wh98
Aliases: CVE-2020-25711 |
Improper Access Control in infinispan-server-runtime A flaw was found in infinispan 10 REST API, where authorization permissions are not checked … |
Vulnerable |
|
GHSA-gg57-587f-h5v6
Aliases: CVE-2023-5384 |
Infinispan caches credentials in clear text A flaw was found in Infinispan. When serializing the configuration for a cache to … |
Not vulnerable |
|
CVE-2019-10158
Aliases: GHSA-6x3v-rw2q-9gx7 |
Session Fixation A flaw was found in Infinispan through version 9.4.14.Final. An improper implementation of the session fixation protection in … | There are no reported fixed by versions. |