CVE-2023-5236 (published 2023-12-18T13:43:08.445Z)
A flaw was found in Infinispan, which does not detect circular object references when unmarshalling. An authenticated attacker with sufficient permissions could insert a maliciously constructed object into the cache and use it to cause out of memory errors and achieve a denial of service.
Affected products: Vendor: n/a
Product: infinispan-server