apache ignite vulnerabilities (CVE)

CVE records published for apache ignite, newest first. Follow to get an email when a new one appears.

3 results
8.5High
CVE-2025-48977

Apache Ignite: REST HTTP arbitrary file read vulnerability

Apache Software Foundation Apache Ignite

Relative Path Traversal vulnerability in Apache Ignite REST API. Authenticated REST API users can read any file on the server with "cmd=log" command and a log path crafted in a certain way. This issue affects Apache Ignite: from 2.0.0 through 2.17.0. Users …

9.8Critical
CVE-2018-1273 KEV Used in ransomware

VMware Tanzu Spring Data Commons Property Binder Vulnerability

Spring by Pivotal Spring Framework

Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can sup…

97%EPSS