Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.infinispan/infinispan-server-rest@9.4.6.Final
purl pkg:maven/org.infinispan/infinispan-server-rest@9.4.6.Final
Next non-vulnerable version 14.0.18.Final
Latest non-vulnerable version 15.0.0.Dev04
Risk score 3.2
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-fhr7-8jx4-r9cp
Aliases:
CVE-2023-3628
Infinispan REST Server's bulk read endpoints do not properly evaluate user permissions A flaw was found in Infinispan's REST. Bulk …
14.0.18.Final
Not vulnerable
GHSA-r4w2-hjmr-36m7
Aliases:
CVE-2023-3629
Infinispan REST Server's cache retrieval endpoints do not properly evaluate the necessary admin permissions A flaw was found in Infinispan's …
14.0.18.Final
Not vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
CVE-2018-1131
Infinispan permits improper deserialization of trusted data via XML and JSON transcoders under certain server configurations. A user with authenticated …