Search for packages
| purl | pkg:maven/org.infinispan/infinispan-core@9.4.17.Final |
| Next non-vulnerable version | 14.0.25.Final |
| Latest non-vulnerable version | 15.0.0.Dev07 |
| Risk score | 3.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-8674-26jc-wh98
Aliases: CVE-2020-25711 |
Improper Access Control in infinispan-server-runtime A flaw was found in infinispan 10 REST API, where authorization permissions are not checked … |
Vulnerable |
|
GHSA-gg57-587f-h5v6
Aliases: CVE-2023-5384 |
Infinispan caches credentials in clear text A flaw was found in Infinispan. When serializing the configuration for a cache to … |
Not vulnerable |
|
CVE-2019-10158
Aliases: GHSA-6x3v-rw2q-9gx7 |
Session Fixation A flaw was found in Infinispan through version 9.4.14.Final. An improper implementation of the session fixation protection in … | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2019-10174
|
A vulnerability was found in Infinispan such that the invokeAccessibly method from the public class ReflectionUtil allows any application class … | |
|
GHSA-h47x-2j37-fw5m
|
Use of Externally-Controlled Input to Select Classes or Code in Infinispan A vulnerability was found in Infinispan such that the … |
CVE-2019-10174
|