org.apache.camel:camel-infinispan-starter (>=2.21.1, <=2.21.5), org.eclipse.vorto:repository-server (0.10.0.m3) +44 more potentially affected by CVE-2018-1131 via org.infinispan:infinispan-core (8.2.10.final)

org.infinispan:infinispan-core MAVEN version 8.2.10.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.apache.camel:camel-infinispan-starter =2.21.1, =2.21.5 -...

org.apereo.cas:cas-server-support-infinispan-ticket-registry (5.2.0-rc2), org.infinispan.server:infinispan-server-event-logger (9.0.3.final) +49 more potentially affected by CVE-2018-1131 via org.infinispan:infinispan-core (9.0.3.final)

org.infinispan:infinispan-core MAVEN version 9.0.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.apereo.cas:cas-server-support-infinispan-ticket-registry 5.2.0-rc2 -...

org.apereo.cas:cas-server-support-infinispan-ticket-registry (5.2.0-rc2), org.infinispan.server:infinispan-server-event-logger (9.0.3.final) +49 more potentially affected by CVE-2018-1131 via org.infinispan:infinispan-core (9.0.3.final)

org.infinispan:infinispan-core MAVEN version 9.0.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.apereo.cas:cas-server-support-infinispan-ticket-registry 5.2.0-rc2 -...

org.apache.camel:camel-infinispan-starter (>=2.21.1, <=2.21.5), org.eclipse.vorto:repository-server (0.10.0.m3) +44 more potentially affected by CVE-2018-1131 via org.infinispan:infinispan-core (8.2.10.final)

org.infinispan:infinispan-core MAVEN version 8.2.10.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.apache.camel:camel-infinispan-starter =2.21.1, =2.21.5 -...

com.giffing.bucket4j.spring.boot.starter:bucket4j-spring-boot-starter (>=0.1.3, <=0.1.15), org.apache.camel:camel-infinispan (>=2.22.0, <=2.22.5) +49 more potentially affected by CVE-2018-1131 via org.infinispan:infinispan-core (9.1.7.final)

org.infinispan:infinispan-core MAVEN version 9.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - com.giffing.bucket4j.spring.boot.starter:bucket4j-spring-boot-starter =0.1.3, =2.22.0, =2.22....

cloud.orbit:orbit-actor-benchmarks (>=1.10.0, <=1.14.0), cloud.orbit:orbit-actor-tests (>=1.10.0, <=1.14.0) +91 more potentially affected by CVE-2018-1131 via org.infinispan:infinispan-core (>=9.3.0.alpha1, <=9.3.0.final)

org.infinispan:infinispan-core MAVEN version =9.3.0.alpha1, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.14.0 - com.coherentlogic.cmr.api:cmr-api-core 2.0.2.1-release - com.coherentlogic.cmr.api:cmr-api-core-boot 2.0.2.1-release - com.coherentlogic.cmr.api:cmr-fred-client-int 2.0.2.1-release -...

org.infinispan.server:infinispan-server-event-logger (9.2.2.final), org.infinispan.server:infinispan-server-feature-pack (9.2.2.final) +53 more potentially affected by CVE-2018-1131 via org.infinispan:infinispan-core (9.2.2.final)

org.infinispan:infinispan-core MAVEN version 9.2.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan.server:infinispan-server-event-logger 9.2.2.final -...

org.infinispan.server:infinispan-server-event-logger (9.2.2.final), org.infinispan.server:infinispan-server-feature-pack (9.2.2.final) +53 more potentially affected by CVE-2018-1131 via org.infinispan:infinispan-core (9.2.2.final)

org.infinispan:infinispan-core MAVEN version 9.2.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan.server:infinispan-server-event-logger 9.2.2.final -...

org.infinispan.server:infinispan-server-event-logger (9.3.0.alpha1), org.infinispan.server:infinispan-server-feature-pack (9.3.0.alpha1) +54 more potentially affected by CVE-2018-1131 via org.infinispan:infinispan-core (9.3.0.alpha1)

org.infinispan:infinispan-core MAVEN version 9.3.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan.server:infinispan-server-event-logger 9.3.0.alpha1 -...

com.giffing.bucket4j.spring.boot.starter:bucket4j-spring-boot-starter (>=0.1.3, <=0.1.15), org.apache.camel:camel-infinispan (>=2.22.0, <=2.22.5) +49 more potentially affected by CVE-2018-1131 via org.infinispan:infinispan-core (9.1.7.final)

org.infinispan:infinispan-core MAVEN version 9.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - com.giffing.bucket4j.spring.boot.starter:bucket4j-spring-boot-starter =0.1.3, =2.22.0, =2.22....

Important: Red Hat Security Advisory: Red Hat Fuse 7.5.0 security update

A minor version update from 7.4 to 7.5 is now available for Red Hat Fuse. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...

Important: Red Hat Security Advisory: Red Hat JBoss Data Grid 7.2.1 security update

An update for Red Hat JBoss Data Grid is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in...

cloud.orbit:orbit-actor-benchmarks (>=1.10.0, <=1.14.0), cloud.orbit:orbit-actor-tests (>=1.10.0, <=1.14.0) +91 more potentially affected by CVE-2018-1131 via org.infinispan:infinispan-core (>=9.3.0.alpha1, <=9.3.0.final)

org.infinispan:infinispan-core MAVEN version =9.3.0.alpha1, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.14.0 - com.coherentlogic.cmr.api:cmr-api-core 2.0.2.1-release - com.coherentlogic.cmr.api:cmr-api-core-boot 2.0.2.1-release - com.coherentlogic.cmr.api:cmr-fred-client-int 2.0.2.1-release -...

CVE-2018-1131

Infinispan vulnerable to improper deserialization of trusted data via XML/JSON transcoders under certain server configurations. Affected versions include 9.0.3.Final, 9.1.7.Final, 8.2.10.Final, 9.2.2.Final, and 9.3.0.Alpha1, with potential code execution when an authenticated user sends a malicio...