Deserialization of Untrusted Data in Hazelcast

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2016-10750 · ADVISORY
• hazelcast/hazelcast · WEB
• hazelcast/hazelcast#12230 · WEB
• access.redhat.com/errata/RHSA-2019:2413

com.hazelcast:hazelcast のその他の脆弱性

• CVE-2026-107726緊急 9.3Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, improp…
• CVE-2026-107725高 8.7Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, missin…
• CVE-2023-45859高 7.6In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client …
• CVE-2023-45860中 6.5In Hazelcast Platform through 5.3.4, a security issue exists within the SQL mapping for the CSV File Source connector. This issue arises fro…
• CVE-2023-33265高 8.8In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, executor services don't check client permissions properly, allowing au…