CVE-2016-0750
Fixed upstream EPSS 2%CVSS 4.2
The hotrod java client in infinispan before 9.1.0.Final automatically deserializes bytearray message contents in certain events. A malicious user could exploit this flaw by injecting a specially-crafted serialized object to attain remote code execution or conduct other attacks.
Products: Red Hat Infinispan
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.infinispan:infinispan-core | 9.1.0.Final |