Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.apache.ignite:ignite-core

7 known vulnerabilities (1 critical, 1 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
7 · 1 critical, 1 high
Dependents
83
Registry
Maven Central

Advisories 7

  • Apache Ignite: REST HTTP arbitrary file read vulnerability

    Affected: from 2.0.0, fixed in 2.18.0.

  • CVE-2024-52577Critical 9.5

    Apache Ignite: Possible RCE when deserializing incoming messages by the server node

    Affected: from 2.6.0, fixed in 2.17.0; from 2.6.0, fixed in 2.17.0.

  • Apache Ignite uses H2 database to build SQL distributed execution engine.

    Affected: fixed in 2.8.1.

  • In Apache Ignite before 2.4.8 and 2.5.x before 2.5.3, the serialization mechanism does not have a list of classes allowed for…

    Affected: fixed in 2.6.

  • In Apache Ignite 2.3 or earlier, the serialization mechanism does not have a list of classes allowed for serialization/deserialization…

    Affected: fixed in 2.4.

  • Apache Ignite 1.0.0-RC3 to 2.0 uses an update notifier component to update the users about new project releases that include additional…

    Affected: fixed in 2.1.

  • Apache Ignite before 1.9 allows man-in-the-middle attackers to read arbitrary files via XXE in modified update-notifier documents.

    Affected: fixed in 1.9.