{"id":"CVE-2020-10771","state":"PUBLISHED","title":"A flaw was found in Infinispan version 10, where it is possible to perform various actions that could have side effects using GET requests. This flaw allows an attacker to perform ","description":"A flaw was found in Infinispan version 10, where it is possible to perform various actions that could have side effects using GET requests. This flaw allows an attacker to perform a cross-site request forgery (CSRF) attack.","publishedAt":"2021-06-02T11:02:53.000Z","updatedAt":"2024-08-04T11:14:14.781Z","severity":null,"assigner":"redhat","products":["n/a Infinispan"],"affected":[{"vendor":"n/a","product":"Infinispan","versions":[{"version":"Red Hat Data Grid 8.2.0","status":"affected"}]}],"references":["https://bugzilla.redhat.com/show_bug.cgi?id=1846293","https://security.netapp.com/advisory/ntap-20210827-0003/"],"weaknesses":["CWE-352"],"ingestedAt":"2026-10-29T19:46:21.897Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/10xxx/CVE-2020-10771.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2020-10771","state":"PUBLISHED","datePublished":"2021-06-02T11:02:53.000Z","dateUpdated":"2024-08-04T11:14:14.781Z","assignerShortName":"redhat","assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateReserved":"2020-03-20T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A flaw was found in Infinispan version 10, where it is possible to perform various actions that could have side effects using GET requests. This flaw allows an attacker to perform a cross-site request forgery (CSRF) attack."}],"affected":[{"vendor":"n/a","product":"Infinispan","versions":[{"version":"Red Hat Data Grid 8.2.0","status":"affected"}]}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1846293","tags":["x_refsource_MISC"]},{"url":"https://security.netapp.com/advisory/ntap-20210827-0003/","tags":["x_refsource_CONFIRM"]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-352","description":"CWE-352","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"redhat","dateUpdated":"2021-08-27T06:07:14.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1846293","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20210827-0003/","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T11:14:14.781Z"}}]}}}