XML External Entity Reference in Hazelcast

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-0265 · ADVISORY
• hazelcast/hazelcast#20407 · WEB
• hazelcast/hazelcast commit 4d6b666 · WEB
• hazelcast/hazelcast · WEB
• huntr.dev/bounties/d63972a2-b910-480a-a86b-d1f75d24d563 · WEB

com.hazelcast:hazelcast のその他の脆弱性

• CVE-2026-107726緊急 9.3Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, improp…
• CVE-2026-107725高 8.7Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, missin…
• CVE-2023-45859高 7.6In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client …
• CVE-2023-45860中 6.5In Hazelcast Platform through 5.3.4, a security issue exists within the SQL mapping for the CSV File Source connector. This issue arises fro…
• CVE-2023-33265高 8.8In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, executor services don't check client permissions properly, allowing au…