HIGH 8.1 Maven
Deserialization of Untrusted Data in Hazelcast
GHSA-jv65-pf7v-f7p8 · CVE-2016-10750
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
In Hazelcast before 3.11, the cluster join procedure is vulnerable to remote code execution via Java deserialization. If an attacker can reach a listening Hazelcast instance with a crafted JoinRequest, and vulnerable classes exist in the classpath, the attacker can run arbitrary code.
Ready to move
Start Securing
Free, no credit card | First findings in minutes