A flaw was found in the Ickle query parser in Infinispan.
A flaw was found in the Ickle query parser in Infinispan. A query containing deeply nested predicates can cause recursive parsing to exhaust the Java thread stack and throw an uncaught StackOverflowError. An authenticated user with BULK_READ permission who can submit a cache query may trigger the issue, potentially affecting availability.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Red Hat
- Product
- Red Hat build of Apache Camel 4 for Quarkus 3, Red Hat Data Grid 8, Red Hat Fuse 7
- CVSS v3.1
- 4.3 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
- Weakness
- CWE-674
- Exposure class
- Web platform
- NVD status
- Awaiting Analysis
Why it ranks 14 (Routine)
- CVSS v3.1 4.3 medium
- Product class: web platform
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.