Lucene search

K
cveMITRECVE-2023-5236
HistoryDec 18, 2023 - 1:43 p.m.

CVE-2023-5236

2023-12-1813:43:08
MITRE
web.nvd.nist.gov
86
infinispan
flaw
authenticated
denial of service
circular object references
nvd

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.1%

A flaw was found in Infinispan, which does not detect circular object references when unmarshalling. An authenticated attacker with sufficient permissions could insert a maliciously constructed object into the cache and use it to cause out of memory errors and achieve a denial of service.

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.1%

Related for CVE-2023-5236