[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkOdqQ0P4lMaNRb89voSiL5nBmg_2orON-XlXlTGipWs":3,"g5a-risk:CVE-2025-48977":122},{"success":4,"data":5,"meta":119},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":41,"epssPercentile":29,"epssTimeSeries":42,"severity":43,"affectedProducts":44,"affectedProductsCount":50,"references":51,"referencesCount":63,"weaknesses":64,"weaknessesCount":50,"isActivelyExploited":73,"cisaInfo":29,"otxData":29,"relatedBlogPosts":74,"seoMetadata":75,"configurations":100,"relatedVendorCves":110,"notableEvents":111},"CVE-2025-48977","What is CVE-2025-48977?","Relative Path Traversal vulnerability in Apache Ignite REST API.\n\nAuthenticated REST API users can read any file on the server with \"cmd=log\" command and a log path crafted in a certain way.\nThis issue affects Apache Ignite: from 2.0.0 through 2.17.0.\n\nUsers are recommended to upgrade to version 2.18.0, which fixes the issue.","Relative Path Traversal vulnerability in Apache Ignite REST API. Authenticated REST API users can read any file on the server with \"cmd=log\" command and a lo...","2026-05-28T10:16:23.423","2026-10-07T08:10:00.2",8.5,"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:H\u002FSI:H\u002FSA:H\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",{"CVSSMetricV31":15,"CVSSMetricV30":32,"CVSSMetricV2":33,"CVSSMetricV40":34},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"nvd@nist.gov","Primary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N","NETWORK","LOW","NONE","UNCHANGED","HIGH",6.5,"MEDIUM",null,2.8,3.6,[],[],[35],{"Source":36,"Type":37,"CVSSData":38},"security@apache.org","Secondary",{"Version":39,"VectorString":13,"BaseScore":12,"BaseSeverity":26,"AttackVector":22,"AttackComplexity":23,"AttackRequirements":24,"PrivilegesRequired":23,"UserInteraction":24,"VulnConfidentialityImpact":26,"VulnIntegrityImpact":24,"VulnAvailabilityImpact":24,"SubConfidentialityImpact":26,"SubIntegrityImpact":26,"SubAvailabilityImpact":26,"ExploitMaturity":40,"ConfidentialityRequirement":40,"IntegrityRequirement":40,"AvailabilityRequirement":40,"ModifiedAttackVector":40,"ModifiedAttackComplexity":40,"ModifiedAttackRequirements":40,"ModifiedPrivilegesRequired":40,"ModifiedUserInteraction":40,"ModifiedVulnConfidentialityImpact":40,"ModifiedVulnIntegrityImpact":40,"ModifiedVulnAvailabilityImpact":40,"ModifiedSubConfidentialityImpact":40,"ModifiedSubIntegrityImpact":40,"ModifiedSubAvailabilityImpact":40,"Safety":40,"Automatable":40,"Recovery":40,"ValueDensity":40,"VulnerabilityResponseEffort":40,"ProviderUrgency":40},"4.0","NOT_DEFINED",0.00527,[41,41,41,41,41,41,41],"High",[45],{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"apache","ignite","*","cpe:2.3:a:apache:ignite:*:*:*:*:*:*:*:*",1,[52,58],{"url":53,"source":54,"tags":55},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Fhgct6918sowd8l58yjohryhpxx81t4n1","Apache",[56,57],"Mailing List","Vendor Advisory",{"url":59,"source":60,"tags":61},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2026\u002F05\u002F28\u002F3","Openwall",[56,62],"Third Party Advisory",2,[65],{"id":66,"name":67,"description":68,"extendedDescription":69,"status":70,"abstraction":71,"structure":72},"CWE-23","Relative Path Traversal","The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as \"..\" that can resolve to a location that is outside of that directory.","This allows attackers to traverse the file system to access files or directories that are outside of the restricted directory.","Draft","Base","Simple",false,[],{"title":76,"metaDescription":77,"keywords":78,"canonicalUrl":79,"structuredData":80},"What is CVE-2025-48977? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-48977, a high severity cyber security vulnerability from 2026. Relative Path Traversal vulnerability in Apache Ignite REST...","CVE-2025-48977, CVE-2025-48977 vulnerability, CVE-2025-48977 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2026, CVSS score, exploit, patch, remediation, apache security, ignite vulnerability","\u002Fwhat-is\u002Fcve-2025-48977",{"@context":81,"@type":82,"headline":76,"description":77,"datePublished":10,"dateModified":11,"author":83,"publisher":87,"about":91,"mainEntityOfPage":95,"articleSection":98,"keywords":99},"https:\u002F\u002Fschema.org","TechArticle",{"@type":84,"name":85,"url":86},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":84,"name":85,"url":86,"logo":88},{"@type":89,"url":90},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":92,"name":6,"description":93,"additionalType":94},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":96,"@id":97},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-48977","Cybersecurity","CVE-2025-48977, CVE-2025-48977 vulnerability, CVE-2025-48977 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[101],{"Operator":29,"Negate":29,"Nodes":102},[103],{"Operator":104,"Negate":73,"CPEMatch":105},"OR",[106],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":107,"VersionStartExcluding":29,"VersionStartIncluding":108,"VersionEndExcluding":109,"VersionEndIncluding":29},"5EB618DA-563A-467F-A78B-C9834C57FE1F","2.0.0","2.18.0",[],[112],{"id":113,"eventType":114,"eventTime":115,"details":116,"label":117,"color":118},"43af2843-493b-4b69-8571-3c827d4390bc","NEW_NVD","2026-05-29T04:01:04.065243+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":11,"cacheTime":120,"version":121},1792358954375,"2.0",{"score":123,"band":124,"action":125,"scoredAt":126},24,"Low","Monitor","2026-10-16T07:13:47.593327+00:00"]