296 matches found
Apache Spark Cross-Site Scripting Vulnerability
Apache Spark is a large-scale data processing engine that supports acyclic data streams and in-memory computing from the Apache Software Foundation. A security vulnerability exists in Apache Spark versions prior to 2.2.0. The vulnerability can be exploited by an attacker to inject scripts by...
CVE-2017-7678
In Apache Spark before 2.2.0, it is possible for an attacker to take advantage of a user's trust in the server to trick them into visiting a link that points to a shared Spark cluster and submits data including MHTML to the Spark master, or history server. This data, which could contain a script,...
CVE-2017-7678
In Apache Spark before 2.2.0, it is possible for an attacker to take advantage of a user's trust in the server to trick them into visiting a link that points to a shared Spark cluster and submits data including MHTML to the Spark master, or history server. This data, which could contain a script,...
Code injection
In Apache Spark before 2.2.0, it is possible for an attacker to take advantage of a user's trust in the server to trick them into visiting a link that points to a shared Spark cluster and submits data including MHTML to the Spark master, or history server. This data, which could contain a script,...
CVE-2017-7678
In Apache Spark before 2.2.0, it is possible for an attacker to take advantage of a user's trust in the server to trick them into visiting a link that points to a shared Spark cluster and submits data including MHTML to the Spark master, or history server. This data, which could contain a script,...
CVE-2017-7678
CVE-2017-7678 affects Apache Spark up to version 2.2.0, where the web UI may reflect user-supplied data (including MHTML) back to the user. The root cause is improper validation of input by the Spark web UI, allowing an attacker to lure a user into a link pointing to a shared Spark cluster and tr...
Remote Code Execution (RCE) Via Unsafe Deserialization
apache-spark is vulnerable to remote code execution RCE through unsafe deserialization. A malicious user can pass an object through the port of the system that when deserialized can cause arbitrary code to be executed...
IBM Development Package for Apache Spark Denial of Service Vulnerability
IBM Development Package for Apache Spark is a software development kit. A denial of service vulnerability exists in IBM Development Package for Apache Spark, which can be exploited to launch a denial of service attack. In addition, the Apache Development Package for Apache Spark is vulnerable to ...
Apache Spark Cluster Arbitrary Code Execution Vulnerability
This VT has been deprecated and is therefore no longer functional. Apache Spark Cluster is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
Apache Spark Cluster 1.3.x Arbitrary Code Execution
Exploit Title: Arbitary Code Execution in Apache Spark Cluster Date: 23/03/2015 Exploit Author: AkhlD AkhilDas CodeBreach.in Vendor Homepage: https://spark.apache.org/ Software Link: https://spark.apache.org/downloads.html Version: All 0.0.x, 1.1.x, 1.2.x, 1.3.x Tested on: 1.2.1 Credits: Mayur...
Apache Spark Cluster 1.3.x - Arbitrary Code Execution
Exploit Title: Arbitary Code Execution in Apache Spark Cluster Date: 23/03/2015 Exploit Author: AkhlD AkhilDas CodeBreach.in Vendor Homepage: https://spark.apache.org/ Software Link: https://spark.apache.org/downloads.html Version: All 0.0.x, 1.1.x, 1.2.x, 1.3.x Tested on: 1.2.1 Credits: Mayur...
Apache Spark Cluster 1.3.x - Arbitrary Code Execution
Apache Spark Cluster 1.3.x - Arbitrary Code Execution Exploit Title: Arbitary Code Execution in Apache Spark Cluster Date: 23/03/2015 Exploit Author: AkhlD AkhilDas CodeBreach.in Vendor Homepage: https://spark.apache.org/ Software Link: https://spark.apache.org/downloads.html Version: All 0.0.x,...
Apache Spark Cluster Arbitary Code Execution Exploit
Spark clusters which are not secured with proper firewall can be taken over easily Since it does not have any authentication mechanism, this exploit simply runs arbitrary codes over the cluster. All you have to do is, find a vulnerable Spark cluster usually runs on port 7077 add that host to your...