Skip to content
Sign in
4.2 Medium

CVE-2016-0750 The hotrod java client in infinispan before 9.1.0.Final automatically deserializes bytearray message contents in certain…

Description

The hotrod java client in infinispan before 9.1.0.Final automatically deserializes bytearray message contents in certain events. A malicious user could exploit this flaw by injecting a specially-crafted serialized object to attain remote code execution or conduct other attacks.

Affected products and versions

Product Affected versions Fixed in
Infinispan 9.1.0.Final No fix stated

Other CVEs of Infinispan

The 3 CVEs of Infinispan →
CVE-2025-5731 A flaw was found in Infinispan CLI 5.5 Medium CVE-2019-10158 A flaw was found in Infinispan through version 9.4.14.Final 5.4 Medium
Track this CVE