| Package | Affected versions | Patched versions |
|---|---|---|
| org.infinispan.protostream:protostream | < 4.6.2.Final | 4.6.2.Final |
| data grid | < 8.4.4 | 8.4.4 |
A flaw was found in Infinispan, which does not detect circular object references when unmarshalling. An authenticated attacker with sufficient permissions could insert a maliciously constructed object into the cache and use it to cause out of memory errors and achieve a denial of service.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free