CVE-2020-10771CWE-352

A flaw was found in Infinispan version 10, where it is possible to perform various actions that could have side effects using GET requests

published June 2, 2021

CVSS
—
EPSS
0%
Percentile
37.7
In the wild
Unconfirmed
What it is

A flaw was found in Infinispan version 10, where it is possible to perform various actions that could have side effects using GET requests. This flaw allows an attacker to perform a cross-site request forgery (CSRF) attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00445 · 37.7th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2021-06-02T11:02Z
EPSS history
Timeline
  • 02 JUN 11:02Z
    A flaw was found in Infinispan version 10, where it is possible to perform various actions that could have side effects using GET requests
    cvelistv5