Apache Software Foundation Ignite vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Apache Software Foundation Ignite: 2 record(s), with affected versions and fixes.
cpe:2.3:a:apache:ignite

CVE-2025-48977 Medium · 6.5 CWE-23 May 28, 2026

Apache Ignite: REST HTTP arbitrary file read vulnerability

Relative Path Traversal vulnerability in Apache Ignite REST API. Authenticated REST API users can read any file on the server with "cmd=log" command and a log path crafted in a certain way. This issue affects Apache Ignite: from 2.0.0 through 2.17.0. Users are recommended to upgrade to version 2.18.0, which fixes the issue.

CVE-2018-1273 Critical · 9.8 KEV Urgent · 77 Public exploit Ransomware CWE-94 Apr 11, 2018

VMware Tanzu Spring Data Commons Property Binder Vulnerability

Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can supply specially crafted request parameters against Spring Data REST backed HTTP resources or using Spring Data's projection-based request payload binding hat can lead to a remote code execution attack.