Threats affecting pkg:maven/Apache Software Foundation/org.apache.ignite:ignite-rest-http

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.5	EPSS 0.5%	CVE-2025-48977Apache Ignite · Relative Path Traversal High8.5EPSS 0.5%2026-05-28CVE Database V5CVE-2025-48977 A Relative Path Traversal vulnerability (CWE-23) exists in the Apache Ignite REST API that allows authenticated users to read arbitrary files on the server by exploiting the "cmd=log" command with a specially crafted log path. This affects Apache Ignite versions from 2.0.0 through 2.17.0. The issue is fixed in version 2.18.0. The vulnerability has a high severity with a CVSS 4.0 base score of 8.5. EPSS 0.5%Vulnerability Apache Software Foundation CWE-23	CVE Database V5	2026-05-28

Page 1 of 1