CVE-2018-8018

creationtimestamp| type| source ---|---|--- 2024-01-06 13:37:19+00:00| seen| https://t.me/arpsyndicate/2542...

CVE-2018-8018

Impacted component: Apache Ignite. Affected versions include before 2.4.8 and 2.5.x before 2.5.3, where the serialization mechanism does not maintain a whitelist of allowed classes. Root cause: grids deserializing untrusted data via GridClientJdkMarshaller without a restricted class list, enablin...