Apache Ignite uses H2 database to build SQL distributed execution engine. H2 provides SQL functions which could be used by attacker to access to a filesystem.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NApache Ignite
APPApache≤ 2.8.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References
Related vulnerabilities
CVE-2018-1273CRITICAL9.8⚠ KEVten sam produkt
Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain ...
CVE-2024-52577CRITICAL9.5PL ✓ten sam produkt
Apache Ignite: pominięcie filtrów deserializacji umożliwia RCE
CVE-2018-8018CRITICAL9.8ten sam produkt
In Apache Ignite before 2.4.8 and 2.5.x before 2.5.3, the serialization mechanism does not have a list of clas...
CVE-2018-1295CRITICAL9.8ten sam produkt
In Apache Ignite 2.3 or earlier, the serialization mechanism does not have a list of classes allowed for seria...
CVE-2025-48977HIGH8.5ten sam produkt
Relative Path Traversal vulnerability in Apache Ignite REST API. Authenticated REST API users can read any fi...