Search for packages
| purl | pkg:maven/org.infinispan/infinispan-core@9.3.0.Alpha1 |
| Next non-vulnerable version | 14.0.25.Final |
| Latest non-vulnerable version | 15.0.0.Dev07 |
| Risk score | 4.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-8674-26jc-wh98
Aliases: CVE-2020-25711 |
Improper Access Control in infinispan-server-runtime A flaw was found in infinispan 10 REST API, where authorization permissions are not checked … |
Vulnerable |
|
GHSA-gg57-587f-h5v6
Aliases: CVE-2023-5384 |
Infinispan caches credentials in clear text A flaw was found in Infinispan. When serializing the configuration for a cache to … |
Not vulnerable |
|
GHSA-6x3v-rw2q-9gx7
Aliases: CVE-2019-10158 |
Improper implementation of the session fixation protection in Infinispan A flaw was found in Infinispan through version 9.4.14.Final. An improper … |
Vulnerable |
|
GHSA-qqfc-m9hc-pqv3
Aliases: CVE-2018-1131 |
Deserialization of Untrusted Data in Infinispan Infinispan permits improper deserialization of trusted data via XML and JSON transcoders under certain … |
Vulnerable Vulnerable |
|
CVE-2019-10158
Aliases: GHSA-6x3v-rw2q-9gx7 |
Session Fixation A flaw was found in Infinispan through version 9.4.14.Final. An improper implementation of the session fixation protection in … | There are no reported fixed by versions. |
|
GHSA-h47x-2j37-fw5m
Aliases: CVE-2019-10174 |
Use of Externally-Controlled Input to Select Classes or Code in Infinispan A vulnerability was found in Infinispan such that the … |
Vulnerable Vulnerable Vulnerable |