Apache Ignite vulnerabilities
1 known vulnerability in Apache Ignite from Apache. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.0average CVSS score
Latest first
- 9.0 Critical severity
Apache Ignite: Deserialization of Untrusted Data
In Apache Ignite versions from 2.6.0 and before 2.17.0, configured Class Serialization Filters are ignored for some Ignite endpoints. The vulnerability could be exploited if an attacker manually crafts an Ignite message containing a vulnerable object whose cla