CVE-2018-8018

creationtimestamp| type| source ---|---|--- 2024-01-06 13:37:19+00:00| seen| https://t.me/arpsyndicate/2542...

org.apache.ignite:ignite-aop (1.0.0-rc1), org.apache.ignite:ignite-aws (1.0.0-rc1) +22 more potentially affected by CVE-2018-8018 via org.apache.ignite:ignite-core (1.0.0-rc1)

org.apache.ignite:ignite-core MAVEN version 1.0.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.ignite:ignite-core and may be impacted: - org.apache.ignite:ignite-aop 1.0.0-rc1 - org.apache.ignite:ignite-aws 1.0.0-rc1 -...

org.apache.ignite:ignite-aop (1.0.0-rc3), org.apache.ignite:ignite-aws (1.0.0-rc3) +21 more potentially affected by CVE-2018-8018 via org.apache.ignite:ignite-core (1.0.0-rc3)

org.apache.ignite:ignite-core MAVEN version 1.0.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.ignite:ignite-core and may be impacted: - org.apache.ignite:ignite-aop 1.0.0-rc3 - org.apache.ignite:ignite-aws 1.0.0-rc3 -...

org.apache.ignite:ignite-aop (1.1.0-incubating), org.apache.ignite:ignite-aws (1.1.0-incubating) +22 more potentially affected by CVE-2018-8018 via org.apache.ignite:ignite-core (1.1.0-incubating)

org.apache.ignite:ignite-core MAVEN version 1.1.0-incubating is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.ignite:ignite-core and may be impacted: - org.apache.ignite:ignite-aop 1.1.0-incubating - org.apache.ignite:ignite-aws...

org.apache.ignite:ignite-aop (1.2.0-incubating), org.apache.ignite:ignite-aws (1.2.0-incubating) +23 more potentially affected by CVE-2018-8018 via org.apache.ignite:ignite-core (1.2.0-incubating)

org.apache.ignite:ignite-core MAVEN version 1.2.0-incubating is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.ignite:ignite-core and may be impacted: - org.apache.ignite:ignite-aop 1.2.0-incubating - org.apache.ignite:ignite-aws...

com.srotya.tau:tau-alerts (>=0.0.5, <=0.0.8), com.srotya.tau:tau-dengine (>=0.0.5, <=0.0.8) +37 more potentially affected by CVE-2018-8018 via org.apache.ignite:ignite-core (1.4.0)

org.apache.ignite:ignite-core MAVEN version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.ignite:ignite-core and may be impacted: - com.srotya.tau:tau-alerts =0.0.5, =0.0.5, =0.0.5, =0.0.5, =0.16.0-rc1, =0.0.18, =0.0.18, =0.0.18,...

org.apache.ignite:ignite-aop (1.5.0-b1), org.apache.ignite:ignite-aws (1.5.0-b1) +31 more potentially affected by CVE-2018-8018 via org.apache.ignite:ignite-core (1.5.0-b1)

org.apache.ignite:ignite-core MAVEN version 1.5.0-b1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.ignite:ignite-core and may be impacted: - org.apache.ignite:ignite-aop 1.5.0-b1 - org.apache.ignite:ignite-aws 1.5.0-b1 -...

com.ecfront:ezf-message (>=3.0.0-beta1, <=3.0.0-beta3), com.jiuxian:mossrose (>=1.1.0-release, <=1.3.2-release) +46 more potentially affected by CVE-2018-8018 via org.apache.ignite:ignite-core (1.5.0.final)

org.apache.ignite:ignite-core MAVEN version 1.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.ignite:ignite-core and may be impacted: - com.ecfront:ezf-message =3.0.0-beta1, =1.1.0-release, =1.0.0-release, =0.0.5, =0.18.0-rc1,...

com.jiuxian:mossrose (>=2.0.0-release, <=2.0.6-release), info.debatty.mark:server (>=0.0.5, <=0.0.8) +43 more potentially affected by CVE-2018-8018 via org.apache.ignite:ignite-core (1.8.0)

org.apache.ignite:ignite-core MAVEN version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.ignite:ignite-core and may be impacted: - com.jiuxian:mossrose =2.0.0-release, =0.0.5, =0.0.8 - io.vertx:vertx-ignite 3.4.0.beta1 -...

com.ecfront.dew:cluster-spi-ignite (>=1.0.0, <=1.1.4), com.fnklabs.draenei:ignite (0.8.5) +47 more potentially affected by CVE-2018-8018 via org.apache.ignite:ignite-core (1.9.0)

org.apache.ignite:ignite-core MAVEN version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.ignite:ignite-core and may be impacted: - com.ecfront.dew:cluster-spi-ignite =1.0.0, =2.0.7-release, =3.4.0, =3.4.0, =2.19.0, =2.19.0, =2.19.5 ...

com.ecfront.dew:cluster-spi-ignite (1.2.2-rc), com.giffing.bucket4j.spring.boot.starter:bucket4j-spring-boot-starter (>=0.1.2, <=0.1.15) +75 more potentially affected by CVE-2018-8018 via org.apache.ignite:ignite-core (>=2.0.0, <=2.5.0)

org.apache.ignite:ignite-core MAVEN version =2.0.0, =0.1.2, =2.2.0, =3.0.0-rc1, =1.0.8, =2.3.0-release, =1.0.0-release, =19.01.0, =1.0.0, =1.0.0, =0.30.0-beta1, =18.12.0-edge and more Source cves: CVE-2018-8018 Source advisory: OSV:GHSA-QCJV-WFCG-MMPR...

com.ecfront.dew:cluster-spi-ignite (1.2.2-rc), com.giffing.bucket4j.spring.boot.starter:bucket4j-spring-boot-starter (>=0.1.2, <=0.1.15) +75 more potentially affected by CVE-2018-8018 via org.apache.ignite:ignite-core (>=2.0.0, <=2.5.0)

org.apache.ignite:ignite-core MAVEN version =2.0.0, =0.1.2, =2.2.0, =3.0.0-rc1, =1.0.8, =2.3.0-release, =1.0.0-release, =19.01.0, =1.0.0, =1.0.0, =0.30.0-beta1, =18.12.0-edge and more Source cves: CVE-2018-8018 Source advisory: GHSA-QCJV-WFCG-MMPR...

CVE-2018-8018

Impacted component: Apache Ignite. Affected versions include before 2.4.8 and 2.5.x before 2.5.3, where the serialization mechanism does not maintain a whitelist of allowed classes. Root cause: grids deserializing untrusted data via GridClientJdkMarshaller without a restricted class list, enablin...