Description

A flaw was found in Infinispan's REST. Bulk read endpoints do not properly evaluate user permissions for the operation. This issue could allow an authenticated user to access information outside of their intended permissions.

Remediation

References

CVE-2023-3628

Related Vulnerabilities

WordPress Plugin BuddyBoss Media Cross-Site Scripting (3.2.3)

WordPress Plugin IGIT Related Posts With Thumb Image After Posts TimThumb Arbitrary File Upload (3.9.7)

WordPress Plugin RAYS Grid Cross-Site Request Forgery (1.2.2)

WordPress 4.5.x PHP Object Injection (4.5 - 4.5.23)

Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-8045)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities CVE-2023-3628