CVE-2025-32896

Summary Unauthorized users can perform Arbitrary File Read and Deserializationattack by submit job using restful api-v1. Details Unauthorized users can access /hazelcast/rest/maps/submit-job to submitjob.An attacker can set extra params in mysql url to perform Arbitrary FileRead and Deserialization...