Apache Spark vulnerabilities

21 known vulnerabilities affecting apache/spark.

Total CVEs

21

CISA KEV

1

actively exploited

Public exploits

3

Exploited in wild

2

Severity breakdown

CRITICAL3HIGH8MEDIUM10

Vulnerabilities

Page 2 of 2

CVE-2017-7678MEDIUMCVSS 6.1≤ 2.1.12017-07-12

CVE-2017-7678 [MEDIUM] CWE-79 CVE-2017-7678: In Apache Spark before 2.2.0, it is possible for an attacker to take advantage of a user's trust in In Apache Spark before 2.2.0, it is possible for an attacker to take advantage of a user's trust in the server to trick them into visiting a link that points to a shared Spark cluster and submits data including MHTML to the Spark master, or history server. This data, which could contain a script, would then be reflected back to the user and could be eva

← Previous2 / 2