org.infinispan.server:infinispan-server-event-logger (9.0.0.cr1), org.infinispan.server:infinispan-server-feature-pack (9.0.0.cr1) +45 more potentially affected by CVE-2020-25711 via org.infinispan:infinispan-core (9.0.0.cr1)

org.infinispan:infinispan-core MAVEN version 9.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan.server:infinispan-server-event-logger 9.0.0.cr1 -...

org.infinispan.server:infinispan-server-event-logger (9.0.0.alpha1), org.infinispan.server:infinispan-server-feature-pack (9.0.0.alpha1) +34 more potentially affected by CVE-2020-25711 via org.infinispan:infinispan-core (9.0.0.alpha1)

org.infinispan:infinispan-core MAVEN version 9.0.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan.server:infinispan-server-event-logger 9.0.0.alpha1 -...

org.infinispan.server:infinispan-server-event-logger (9.4.0.beta1), org.infinispan.server:infinispan-server-infinispan (9.4.0.beta1) +58 more potentially affected by CVE-2020-25711 via org.infinispan:infinispan-core (9.4.0.beta1)

org.infinispan:infinispan-core MAVEN version 9.4.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan.server:infinispan-server-event-logger 9.4.0.beta1 -...

org.hibernate.ogm:hibernate-ogm-infinispan-embedded (>=5.3.0.final, <=5.3.1.final), org.infinispan.server:infinispan-server-event-logger (9.1.6.final) +57 more potentially affected by CVE-2020-25711 via org.infinispan:infinispan-core (9.1.6.final)

org.infinispan:infinispan-core MAVEN version 9.1.6.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.hibernate.ogm:hibernate-ogm-infinispan-embedded =5.3.0.final, =5.3.1.final -...

org.infinispan.server:infinispan-server-feature-pack (8.1.0.alpha1), org.infinispan.server:infinispan-server-infinispan (8.1.0.alpha1) +31 more potentially affected by CVE-2020-25711 via org.infinispan:infinispan-core (8.1.0.alpha1)

org.infinispan:infinispan-core MAVEN version 8.1.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 8.1.0.alpha1 -...

infinispan-server-rest: Actions with effects should not be permitted via GET requests using REST API

A flaw was found in infinispan-server-rest version 10, where it is possible to perform various actions that could have side effects using GET requests. This flaw allows an attacker to perform a Cross-site request forgery CSRF attack...

io.silverware:http-invoker-microservice-provider (>=1.0, <=2.0), io.silverware:http-server-microservice-provider (>=1.0, <=2.0) +99 more potentially affected by CVE-2020-10687 via io.undertow:undertow-core (1.3.11.final)

io.undertow:undertow-core MAVEN version 1.3.11.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.silverware:http-invoker-microservice-provider =1.0, =1.0, =2.0.11.final, =2.0.11.final,...

io.undertow:undertow-http2-test-suite (1.3.0.cr2), io.undertow:undertow-servlet (1.3.0.cr2) +52 more potentially affected by CVE-2020-10705 via io.undertow:undertow-core (1.3.0.cr2)

io.undertow:undertow-core MAVEN version 1.3.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.cr2 - io.undertow:undertow-servlet 1.3.0.cr2 -...

CVE-2020-10746: Missing Authorization

A flaw was found in Infinispan org.infinispan:infinispan-server-runtime version 10, where it permits local access to controls via both REST and HotRod APIs. This flaw allows a user authenticated to the local machine to perform all operations on the caches, including the creation, update, deletion...

org.infinispan.server:infinispan-server-feature-pack (8.1.6.final), org.infinispan.server:infinispan-server-infinispan (8.1.6.final) +33 more potentially affected by CVE-2019-10158 via org.infinispan:infinispan-core (8.1.6.final)

org.infinispan:infinispan-core MAVEN version 8.1.6.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 8.1.6.final -...

org.infinispan.server:infinispan-server-feature-pack (8.1.5.final), org.infinispan.server:infinispan-server-infinispan (8.1.5.final) +33 more potentially affected by CVE-2019-10158 via org.infinispan:infinispan-core (8.1.5.final)

org.infinispan:infinispan-core MAVEN version 8.1.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 8.1.5.final -...

org.infinispan.server:infinispan-server-event-logger (8.2.0.beta2), org.infinispan.server:infinispan-server-feature-pack (8.2.0.beta2) +35 more potentially affected by CVE-2019-10158 via org.infinispan:infinispan-core (8.2.0.beta2)

org.infinispan:infinispan-core MAVEN version 8.2.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan.server:infinispan-server-event-logger 8.2.0.beta2 -...

org.infinispan.server:infinispan-server-event-logger (8.2.0.cr1), org.infinispan.server:infinispan-server-feature-pack (8.2.0.cr1) +35 more potentially affected by CVE-2019-10158 via org.infinispan:infinispan-core (8.2.0.cr1)

org.infinispan:infinispan-core MAVEN version 8.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan.server:infinispan-server-event-logger 8.2.0.cr1 -...

org.entando.entando.plugins:entando-plugin-jpinfinispan (5.1.0), org.hibernate.ogm:hibernate-ogm-infinispan (5.0.0.beta1) +35 more potentially affected by CVE-2019-10158 via org.infinispan:infinispan-core (8.0.2.final)

org.infinispan:infinispan-core MAVEN version 8.0.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.entando.entando.plugins:entando-plugin-jpinfinispan 5.1.0 -...

io.undertow:undertow-http2-test-suite (1.3.0.cr2), io.undertow:undertow-servlet (1.3.0.cr2) +52 more potentially affected by CVE-2019-3888 via io.undertow:undertow-core (1.3.0.cr2)

io.undertow:undertow-core MAVEN version 1.3.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.cr2 - io.undertow:undertow-servlet 1.3.0.cr2 -...

io.undertow:undertow-http2-test-suite (1.3.0.cr1), io.undertow:undertow-servlet (1.3.0.cr1) +49 more potentially affected by CVE-2019-3888 via io.undertow:undertow-core (1.3.0.cr1)

io.undertow:undertow-core MAVEN version 1.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.cr1 - io.undertow:undertow-servlet 1.3.0.cr1 -...