4 matches found
EUVD-2022-5015
Malicious code in bioql PyPI...
CVE-2018-1131
Infinispan permits improper deserialization of trusted data via XML and JSON transcoders under certain server configurations. A user with authenticated access to the server could send a malicious object to a cache configured to accept certain types of objects, achieving code execution and possibl...
PT-2018-10472
Name of the Vulnerable Software and Affected Versions Infinispan versions 8.2.10.Final through 9.3.0.Alpha1 Description The issue allows for improper deserialization of trusted data via XML and JSON transcoders under certain server configurations. An authenticated user could send a malicious obje...
CVE-2018-1131: Acceptance of Extraneous Untrusted Data With Trusted Data
Infinispan permits improper deserialization of trusted data via XML and JSON transcoders under certain server configurations. A user with authenticated access to the server could send a malicious object to a cache configured to accept certain types of objects, achieving code execution and possibl...