CVE-2019-10174
1 advisory.
Maven/org.infinispan:infinispan-core CVE-2019-10174: high 7.5, EPSS 3.09%
Use of Externally-Controlled Input to Select Classes or Code in Infinispan
Action: Upgrade org.infinispan:infinispan-core to 8.2.12.Final (8.x) or 9.4.17.Final (9.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 8.2.12.Final | - |
| 9.0.0.Final | 9.4.17.Final | - |
Fixed versions
| 8.2.12.Final | 9.4.17.Final |
Sources
- osv: GHSA-h47x-2j37-fw5m
- https://nvd.nist.gov/vuln/detail/CVE-2019-10174
- https://github.com/infinispan/infinispan/commit/5dbb05cfaca01a1a66732b82a0f5ba615ccbd214
- https://github.com/infinispan/infinispan/commit/7bdc2822ccf79127a488130239c49a5e944e3ca2
- https://access.redhat.com/errata/RHSA-2020:0481
- https://access.redhat.com/errata/RHSA-2020:0727
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10174
- https://github.com/infinispan/infinispan
- https://security.netapp.com/advisory/ntap-20220210-0018
CVE-2019-10174 · published · modified · JSON