← CVE Intelligence

CVE-2025-2529

IBM Terracotta denial of service PUBLISHED

Description (CNA)

Applications using affected versions of Ehcache 3.x can experience degraded cache-write performance if the application using Ehcache utilizes keys sourced from (malicious) external parties in an unfiltered/unsalted way.

Affected (CNA)

Vendor / productVersions
IBM / Terracottaaffected 10.15.0 through 10.15.0 IF23; affected 11.1.0 through 11.1.0 IF5

CWE

CWE-228

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.