Reflection Method Vulnerability in Infinispan by Red Hat

CVE-2019-10174

What is CVE-2019-10174?

A vulnerability exists in Infinispan where the invokeAccessibly method from the public class ReflectionUtil allows any application class to invoke private methods within classes that have Infinispan's privileges. This exploitation enables an attacker to leverage reflection for introducing malicious behavior into the application, potentially compromising its functionality and integrity.

References