Executive brief
Code execution via deserialization in org.apache.ignite:ignite-core
Affected products
- Maven org.apache.ignite:ignite-core
Junglewise Threat Intelligence
CVE-2018-8018: Code execution via deserialization in org.apache.ignite:ignite-core
CVE-2018-8018 · Severity: low · CVSS 3 · Published 2018-10-16
Technologies: org.apache.ignite:ignite-core (Maven). Vendors: Maven.
Related threats
- Apache Ignite path traversal in REST API
- Apache Ignite: Possible RCE when deserializing incoming messages by the server node
- File system access via H2 in Apache Ignite
- Apache serialization mechanism does not have a list of classes allowed for serialization/deserialization
- Moderate severity vulnerability that affects org.apache.ignite:ignite-core