CVE-2020-10771

No fix known EPSS <1%

A flaw was found in Infinispan version 10, where it is possible to perform various actions that could have side effects using GET requests. This flaw allows an attacker to perform a cross-site request forgery (CSRF) attack.

Published 2021-06-02 · CVE record · OSV

Products: infinispan-server-rest, redhat data_grid, netapp oncommand_insight