Approved changes feed: RSS · Atom

cpe:2.3:a:infinispan:infinispan-server-rest:10.0.0:*:*:*:*:*:*:*

part: a version: 10.0.0 update: *

VendorInfinispan (ddbd4d07-948e-53f7-b732-fa69b3776ed5)
ProductInfinispan Server Rest (be585697-bf4a-5897-816f-d2c9fa3e9522)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/infinispan/infinispan purl2cpe 2026-06-01 10:12:22.649369
pkg:maven/org.infinispan/infinispan-server-rest purl2cpe 2026-06-01 10:12:22.649370

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-10771 vulnerable 2026-06-08 05:16:35.861757 Details available
A flaw was found in Infinispan version 10, where it is possible to perform various actions that could have side effects using GET requests. This flaw allows an attacker to perform a cross-site request forgery (CSRF) attack.
Published: 2021-06-02T11:02:53.000Z
Updated: 2024-08-04T11:14:14.781Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.