description: It was found that the Hotrod client in Infinispan before 9.2.0.CR1 would unsafely read deserialized data on information from the cache. An authenticated attacker could inject a malicious object into the data cache and attain deserialization on the client, and possibly conduct further attacks.
problem types: CWE-502
affected:
{
product: infinispan
vendor: Infinispan
versions:
status: affected, version: before 9.2.0.CR1
}