CVE-2022-33891 — Vulnerability intelligence

Apache — Spark

Published: 2022-07-18T00:00:00.000Z

CVSS

8.8

CISA KEV

Known exploitation

Original source text (not a translation)

Apache Spark contains a command injection vulnerability via Spark User Interface (UI) when Access Control Lists (ACLs) are enabled.

Sources

• Apache Spark Command Injection Vulnerability
• Original advisory
• Original advisory
• CVE-2022-33891