Medium
4.4
Infinispan: circular reference on marshalling leads to dos
CVE-2023-5236
First seen on SecPulse
Summary
A flaw was found in Infinispan, which does not detect circular object references when unmarshalling. An authenticated attacker with sufficient permissions could insert a maliciously constructed object into the cache and use it to cause out of memory errors and achieve a denial of service.
References
- issue bugzilla.redhat.com
- patch access.redhat.com
- patch access.redhat.com
- web security.netapp.com