6.5
CVSSv3

CVE-2023-5236

Published: 18/12/2023 Updated: 25/01/2024
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

A flaw was found in Infinispan, which does not detect circular object references when unmarshalling. An authenticated attacker with sufficient permissions could insert a maliciously constructed object into the cache and use it to cause out of memory errors and achieve a denial of service.

Vulnerable Product Search on Vulmon Subscribe to Product

redhat data grid

redhat jboss data grid -

infinispan infinispan -

Vendor Advisories

Synopsis Moderate: Red Hat Data Grid 844 security update Type/Severity Security Advisory: Moderate Topic An update for Red Hat Data Grid 8 is now availableRed Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, i ...
Description<!---->A flaw was found in Infinispan, which does not detect circular object references when unmarshalling An authenticated attacker with sufficient permissions could insert a maliciously constructed object into the cache and use it to cause out of memory errors and achieve a denial of serviceA flaw was found in Infinispan, which does ...