380 matches found
Code injection
In Apache Spark before 2.2.0, it is possible for an attacker to take advantage of a user's trust in the server to trick them into visiting a link that points to a shared Spark cluster and submits data including MHTML to the Spark master, or history server. This data, which could contain a script,...
CVE-2017-7678
In Apache Spark before 2.2.0, it is possible for an attacker to take advantage of a user's trust in the server to trick them into visiting a link that points to a shared Spark cluster and submits data including MHTML to the Spark master, or history server. This data, which could contain a script,...
CVE-2017-7678
In Apache Spark before 2.2.0, it is possible for an attacker to take advantage of a user's trust in the server to trick them into visiting a link that points to a shared Spark cluster and submits data including MHTML to the Spark master, or history server. This data, which could contain a script,...
CVE-2017-7678
CVE-2017-7678 affects Apache Spark up to version 2.2.0, where the web UI may reflect user-supplied data (including MHTML) back to the user. The root cause is improper validation of input by the Spark web UI, allowing an attacker to lure a user into a link pointing to a shared Spark cluster and tr...
CVE-2017-7678
In Apache Spark before 2.2.0, it is possible for an attacker to take advantage of a user's trust in the server to trick them into visiting a link that points to a shared Spark cluster and submits data including MHTML to the Spark master, or history server. This data, which could contain a script,...
CVE-2017-7678
In Apache Spark before 2.2.0, it is possible for an attacker to take advantage of a user's trust in the server to trick them into visiting a link that points to a shared Spark cluster and submits data including MHTML to the Spark master, or history server. This data, which could contain a script,...
PT-2017-17878
Name of the Vulnerable Software and Affected Versions Apache Spark versions prior to 2.2.0 Description The issue allows an attacker to trick users into visiting a malicious link that submits data, including MHTML, to the Spark master or history server. This data could contain a script that would ...
CVE-2017-7678: Improper Neutralization of Input During Web Page Generation
In Apache Spark before 2.2.0, it is possible for an attacker to take advantage of a user's trust in the server to trick them into visiting a link that points to a shared Spark cluster and submits data including MHTML to the Spark master, or history server. This data, which could contain a script,...
Remote Code Execution (RCE) Via Unsafe Deserialization
apache-spark is vulnerable to remote code execution RCE through unsafe deserialization. A malicious user can pass an object through the port of the system that when deserialized can cause arbitrary code to be executed...
IBM Development Package for Apache Spark Denial of Service Vulnerability
IBM Development Package for Apache Spark is a software development kit. A denial of service vulnerability exists in IBM Development Package for Apache Spark, which can be exploited to launch a denial of service attack. In addition, the Apache Development Package for Apache Spark is vulnerable to ...
PT-2016-7678
Name of the Vulnerable Software and Affected Versions Apache Spark version 2.5 Description A directory traversal issue allows remote attackers to read arbitrary files by including a .. dot dot in the URI. Recommendations For Apache Spark version 2.5, consider restricting access to sensitive files...
Apache Spark Cluster Arbitrary Code Execution Vulnerability
This VT has been deprecated and is therefore no longer functional. Apache Spark Cluster is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
Apache Spark Cluster 1.3.x Arbitrary Code Execution
Exploit Title: Arbitary Code Execution in Apache Spark Cluster Date: 23/03/2015 Exploit Author: AkhlD AkhilDas CodeBreach.in Vendor Homepage: https://spark.apache.org/ Software Link: https://spark.apache.org/downloads.html Version: All 0.0.x, 1.1.x, 1.2.x, 1.3.x Tested on: 1.2.1 Credits: Mayur...
Apache Spark Cluster 1.3.x - Arbitrary Code Execution
Apache Spark Cluster 1.3.x - Arbitrary Code Execution Exploit Title: Arbitary Code Execution in Apache Spark Cluster Date: 23/03/2015 Exploit Author: AkhlD AkhilDas CodeBreach.in Vendor Homepage: https://spark.apache.org/ Software Link: https://spark.apache.org/downloads.html Version: All 0.0.x,...
Apache Spark Cluster 1.3.x - Arbitrary Code Execution
Exploit Title: Arbitary Code Execution in Apache Spark Cluster Date: 23/03/2015 Exploit Author: AkhlD AkhilDas CodeBreach.in Vendor Homepage: https://spark.apache.org/ Software Link: https://spark.apache.org/downloads.html Version: All 0.0.x, 1.1.x, 1.2.x, 1.3.x Tested on: 1.2.1 Credits: Mayur...
Apache Spark Cluster Arbitary Code Execution Exploit
Spark clusters which are not secured with proper firewall can be taken over easily Since it does not have any authentication mechanism, this exploit simply runs arbitrary codes over the cluster. All you have to do is, find a vulnerable Spark cluster usually runs on port 7077 add that host to your...
CVE-2023-27393
This CVE ID has been rejected as unused and does not represent an active vulnerability entry.