Количество 3
Количество 3
CVE-2016-0750
The hotrod java client in infinispan before 9.1.0.Final automatically deserializes bytearray message contents in certain events. A malicious user could exploit this flaw by injecting a specially-crafted serialized object to attain remote code execution or conduct other attacks.
CVE-2016-0750
The hotrod java client in infinispan before 9.1.0.Final automatically deserializes bytearray message contents in certain events. A malicious user could exploit this flaw by injecting a specially-crafted serialized object to attain remote code execution or conduct other attacks.
GHSA-4hhg-8ghq-vwq6
Infinispan: Deserialization of untrusted data in the Hot Rod Java client via automatic byte-array deserialization
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2016-0750 The hotrod java client in infinispan before 9.1.0.Final automatically deserializes bytearray message contents in certain events. A malicious user could exploit this flaw by injecting a specially-crafted serialized object to attain remote code execution or conduct other attacks. | CVSS3: 4.2 | 2% Низкий | почти 9 лет назад |
 | CVE-2016-0750 The hotrod java client in infinispan before 9.1.0.Final automatically deserializes bytearray message contents in certain events. A malicious user could exploit this flaw by injecting a specially-crafted serialized object to attain remote code execution or conduct other attacks. | CVSS3: 4.2 | 2% Низкий | почти 8 лет назад |
| GHSA-4hhg-8ghq-vwq6 Infinispan: Deserialization of untrusted data in the Hot Rod Java client via automatic byte-array deserialization | CVSS3: 8.8 | 2% Низкий | больше 4 лет назад |
Уязвимостей на страницу