Vulnerabilidades do Apache Software Foundation Ignite

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Apache Software Foundation Ignite: 2 registro(s), com versões afetadas e correções.
cpe:2.3:a:apache:ignite

CVE-2025-48977 Média · 6.5 CWE-23 28/05/2026

Apache Ignite: REST HTTP arbitrary file read vulnerability

Relative Path Traversal vulnerability in Apache Ignite REST API. Authenticated REST API users can read any file on the server with "cmd=log" command and a log path crafted in a certain way. This issue affects Apache Ignite: from 2.0.0 through 2.17.0. Users are recommended to upgrade to version 2.18.0, which fixes the issue.

CVE-2018-1273 Crítica · 9.8 KEV Urgente · 77 Exploit público Ransomware CWE-94 11/04/2018

VMware Tanzu Spring Data Commons Property Binder Vulnerability

Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can supply specially crafted request parameters against Spring Data REST backed HTTP resources or using Spring Data's projection-based request payload binding hat can lead to a remote code execution attack.