Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Relative Path Traversal vulnerability in Apache Ignite REST API. Authenticated REST API users can read any file on the server with "cmd=log" command and a log path crafted in a certain way. This issue affects Apache Ignite: from 2.0.0 through 2.17.0. Users are recommended to upgrade to version 2.18.0, which fixes the issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2025-48977: Apache Ignite: Rest Http default Arbitrary file read vulnerability https://www.openwall.com/lists/oss-security/2026/05/28/3 Severity: Important
Post summary
The post announces CVE-2025-48977, noting an arbitrary file read via a default REST HTTP endpoint in Apache Ignite, while providing severity information but no concrete PoC, exploitation details, or mitigation guidance.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | apache | ignite | - | - | - |