| Package | Affected versions | Patched versions |
|---|---|---|
| infinispan-server-rest | = 10.0.0 | |
| data grid | = 8.0 |
A flaw was found in Infinispan version 10, where it is possible to perform various actions that could have side effects using GET requests. This flaw allows an attacker to perform a cross-site request forgery (CSRF) attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free