2.9
Low
CVE-2025-2529 Applications using affected versions of Ehcache 3.x can experience degraded cache-write performance if the application…
Description
Applications using affected versions of Ehcache 3.x can experience degraded cache-write performance if the application using Ehcache utilizes keys sourced from (malicious) external parties in an unfiltered/unsalted way.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Terracotta 11.1 | 11.1.0 → latest | No fix stated |
| Terracotta 10.15 | 10.15.0 → latest | No fix stated |