Lucene search
Veracode Vulnerability DatabaseVERACODE:6310HistoryMay 16, 2018 - 5:11 a.m.
Remote Code Execution (RCE)
2018-05-1605:11:35
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
EPSS
0.003
Percentile
68.1%
infinispan-core is vulnerable to remote code execution (RCE) attacks. An authenticated malicious user can pass an XML or JSON file to the cache to inject and execute arbitrary code when deserialized.
Related
redhatcve
redhatcve
CVE-2018-1131
2019-10-10 04:05:39
osv
osv
CVE-2018-1131
2018-05-15 13:29:00
Deserialization of Untrusted Data in Infinispan
2022-05-13 01:33:29
cvelist
cvelist
CVE-2018-1131
2018-05-15 13:00:00
github
github
Deserialization of Untrusted Data in Infinispan
2022-05-13 01:33:29
redhat
redhat
(RHSA-2018:1833) Important: Red Hat JBoss Data Grid 7.2.1 security update
2018-06-12 10:47:31
(RHSA-2019:3892) Important: Red Hat Fuse 7.5.0 security update
2019-11-14 21:15:16
prion
prion
Deserialization of untrusted data
2018-05-15 13:29:00
nvd
nvd
CVE-2018-1131
2018-05-15 13:29:00
cve
cve
CVE-2018-1131
2018-05-15 13:29:00