Apache Software Foundation Apache Ignite vulnerabilities (CVE)

CVE records published for Apache Software Foundation Apache Ignite, newest first. Follow to get an email when a new one appears.

2 results
8.5High
CVE-2025-48977

Apache Ignite: REST HTTP arbitrary file read vulnerability

Apache Software Foundation Apache Ignite

Relative Path Traversal vulnerability in Apache Ignite REST API. Authenticated REST API users can read any file on the server with "cmd=log" command and a log path crafted in a certain way. This issue affects Apache Ignite: from 2.0.0 through 2.17.0. Users …