Files
CVEs-PoC/2016/CVE-2016-0750.md
2025-09-29 21:09:30 +02:00

772 B

CVE-2016-0750

Description

The hotrod java client in infinispan before 9.1.0.Final automatically deserializes bytearray message contents in certain events. A malicious user could exploit this flaw by injecting a specially-crafted serialized object to attain remote code execution or conduct other attacks.

POC

Reference

No PoCs from references.

Github