| Package | Affected versions | Patched versions |
|---|---|---|
| org.infinispan:infinispan-core | < 9.4.15.Final | 9.4.15.Final |
| infinispan | ≤ 9.4.14 | |
| jboss data grid | = 7.0.0 |
A flaw was found in Infinispan through version 9.4.14.Final. An improper implementation of the session fixation protection in the Spring Session integration can result in incorrect session handling.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free