CVE-2023-5236

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A flaw was found in Infinispan, which does not detect circular object references when unmarshalling. An authenticated attacker with sufficient permissions could insert a maliciously constructed object into the cache and use it to cause out of memory errors and achieve a denial of service.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

No affected versions have been published.

Timeline

Published
Dec 18, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-523607.5Logic vulnerabilities in the baseband.Successful exploitation of this vulnerability may affect service integrity.CVE-2023-523617.5The VerifiedBoot module has a vulnerability that may cause authentication errors.Successful exploitation of this vulnerability may affect inCVE-2023-523627.5Permission management vulnerability in the lock screen module.Successful exploitation of this vulnerability may affect availability.CVE-2023-523635.3Vulnerability of defects introduced in the design process in the Control Panel module.Successful exploitation of this vulnerability may causCVE-2023-523646.3Vulnerability of input parameters being not strictly verified in the RSMC module. Impact: Successful exploitation of this vulnerability may CVE-2023-523655.3Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features tCVE-2023-523667.5Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features tCVE-2023-523677.7Vulnerability of improper access control in the media library module.Successful exploitation of this vulnerability may affect service availaCVE-2023-523685.3Input verification vulnerability in the account module.Successful exploitation of this vulnerability may cause features to perform abnormallCVE-2023-523699.1Stack overflow vulnerability in the NFC module.Successful exploitation of this vulnerability may affect service availability and integrity.CVE-2023-52375.4The Memberlite Shortcodes WordPress plugin before 1.3.9 does not validate and escape some of its shortcode attributes before outputting themCVE-2023-523709.8Stack overflow vulnerability in the network acceleration module.Successful exploitation of this vulnerability may cause unauthorized file ac
CVE-2023-5236: Medium severity, CVSS 6.5 | Vulnix