CVE-2025-48977

ADVISORY - github

Summary

Relative Path Traversal vulnerability in Apache Ignite REST API.

Authenticated REST API users can read any file on the server with "cmd=log" command and a log path crafted in a certain way. This issue affects Apache Ignite: from 2.0.0 through 2.17.0.

Users are recommended to upgrade to version 2.18.0, which fixes the issue.

EPSS Score⁠: 0.00526 (0.406)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-23⁠

Relative Path Traversal

ADVISORY - github

CWE-23⁠

Relative Path Traversal

Impacted images

Advisories

NIST

CREATED

1 month ago

UPDATED

1 month ago

ADVISORY IDCVE-2025-48977⁠

EXPLOITABILITY SCORE

2.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-23⁠

CVSS SCORE

8.5high

GitHub

CREATED

1 month ago

UPDATED

14 hours ago

ADVISORY IDGHSA-v45h-mqf4-6939⁠

EXPLOITABILITY SCORE

2.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-23⁠

CVSS SCORE

8.5high