CVE-2018-8024 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2018-8024 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2018-8024

creationtimestamp| type| source ---|---|--- 2023-10-25 07:52:21+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/19 2025-06-05 09:43:18+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2018/CVE-2018-8024.yaml...

ai.h2o:sparkling-water-core_2.11 (>=2.1.0 <=2.1.24), ai.h2o:sparkling-water-examples_2.11 (>=2.1.0 <=2.1.31) +296 more potentially affected by CVE-2018-8024 via org.apache.spark:spark-core_2.11 (>=2.1.0 <=2.1.2)

org.apache.spark:spark-core2.11 MAVEN version =2.1.0, =2.1.0, =2.1.0, =2.1.0, =2.1.17, =2.1.0, =1.0.0, =2.11-2.1.1-2.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =1.0.0, =1.1.2 and more Source cves: CVE-2018-8024 Source advisory: OSV:GHSA-8CW6-5QVP-Q3WJ...

com.antgroup.tugraph:calcite-spark (>=1.18.0-geaflow_1.0 <=1.18.0-geaflow_1.1), com.couchbase.client:spark-connector_2.10 (=2.2.0) +45 more potentially affected by CVE-2018-8024 via org.apache.spark:spark-core_2.10 (>=2.2.0 <=2.2.1)

org.apache.spark:spark-core2.10 MAVEN version =2.2.0, =1.18.0-geaflow1.0, =0.2.0, =1.0.9, =1.0.9, =0.7.3, =2.2.00.12.0, =1.21.0.138, =0.0.3, =0.2.1, =0.2.2 and more Source cves: CVE-2018-8024 Source advisory: OSV:GHSA-8CW6-5QVP-Q3WJ...

ai.grakn.kgms:client (=1.4.3), ai.grakn:client-java (>=1.4.1 <=1.4.3) +360 more potentially affected by CVE-2018-8024 via org.apache.spark:spark-core_2.11 (>=2.2.0 <=2.2.1)

org.apache.spark:spark-core2.11 MAVEN version =2.2.0, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.3 and more Source cves: CVE-2018-8024 Source advisory: OSV:GHSA-8CW6-5QVP-Q3WJ...

Security Bulletin: Vulnerabilities in Apache Spark affect IBM Operations Analytics Predictive Insights (CVE-2018-8024, CVE-2018-1334)

Summary Apache Spark is used by IBM Operations Analytics Predictive Insights. IBM Operations Analytics Predictive Insights has addressed the applicable CVEs. Note that the usage of Apache Spark within IBM Operations Analytics Predictive Insights is limited to the REST Mediation utility. If you do...

CVE-2018-8024

In Apache Spark 2.1.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, it's possible for a malicious user to construct a URL pointing to a Spark cluster's UI's job and stage info pages, and if a user can be tricked into accessing the URL, can be used to cause script to execute and expose information from the...