中
4.4
Infinispan: circular reference on marshalling leads to dos
CVE-2023-5236
SecPulse初出
概要
A flaw was found in Infinispan, which does not detect circular object references when unmarshalling. An authenticated attacker with sufficient permissions could insert a maliciously constructed object into the cache and use it to cause out of memory errors and achieve a denial of service.
参照URL
- issue bugzilla.redhat.com
- patch access.redhat.com
- patch access.redhat.com
- web security.netapp.com