Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.infinispan:infinispan-server-rest

2 known vulnerabilities (2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 2 medium
Registry
Maven Central

Advisories 2

  • CVE-2023-3629Medium 4.3

    Infinispan: non-admins should not be able to get cache config via rest api

    Affected: from 15.0.0.Dev01, fixed in 15.0.0.Dev04; fixed in 14.0.18.Final.

  • CVE-2023-3628Medium 6.5

    Infispan: rest bulk ops don't check permissions

    Affected: from 15.0.0.Dev01, fixed in 15.0.0.Dev04; fixed in 14.0.18.Final.