cve-2022-33891

cve-2022-33891 Usage: pip3 install requests If you do not use the -d parameter, the dnslog domain name will be automatically applied for you. 如果你不使用-d参数，则会自动为您申请dnslog域名。 python3 cve202233891poc.py -u http://127.0.0.1 python3 cve202233891poc.py -f url.txt python3 cve202233891poc.py -u...

cve-2022-33891-fix

EP3 - MAC0352 Redes deComputadores e Sistemas Distribuidos 2023 Tópico: CVE-2022-33891 Execução de comandos shell arbitrários em aplicação spark que utiliza autenticação via ACL Alunos Elinilson Vital Leoarndo Bozzetto CVE-2022-33891 Patch Instructions for Ubuntu 22.04 Prerequisites Ubuntu 22.04...

Apache-spark-CVE-2022-33891

Apache-spark-CVE-2022-33891 Apache Spark RCE - CVE-2022-33891 PoC Follow us Vulnmachines Platform YouTube Twitter Facebook LinkedIn...

Exploit for OS Command Injection in Apache Spark

CVE-2022-33891 - Apache Spark Command Injection Vulnerability...

Exploit for OS Command Injection in Apache Spark

CVE-2022-33891 - Apache Spark UI Remote Code Execution RCE 🔐...

Exploit for OS Command Injection in Apache Spark

EP3 - MAC0352 Redes deComputadores e Sistemas Distribuidos 202...

Command injection

UNSUPPORTED WHEN ASSIGNED The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in...

Apache Spark <= 3.0.3 / 3.1.x > 3.1.1 / 3.2.x < 3.2.1 RCE (CVE-2022-33891)

A remote code execution vulnerability exists in Apache Spark. The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are...

Apache Spark <= 3.0.3 / 3.1.1 < 3.1.3 / 3.2.x < 3.2.1 RCE (CVE-2022-33891)

Binary data apachesparkcve-2022-33891.nbin...

CISA's KEV Catalog Updated with 3 New Flaws Threatening IT Management Systems

The U.S. Cybersecurity and Infrastructure Security Agency CISA has added three security flaws to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The list of vulnerabilities is below - CVE-2022-35914 CVSS score: 9.8 - Teclib GLPI Remote Code Execution...

K33828251: Apache Spark vulnerability CVE-2022-33891

Security Advisory Description The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in...

Apache Spark UI Command Injection (CVE-2022-33891)

A command execution vulnerability exists in Apache Spark. The vulnerability is due to errors in parsing user requests when the ACL is enabled...

Exploit for OS Command Injection in Apache Spark

CVE-2022-33891 Apache Spark...

Exploit for OS Command Injection in Apache Spark

「💥」CVE-2022-33891 Description The Apache Spark UI offers...

Exploit for OS Command Injection in Apache Spark

CVE-2022-33891 Apache Spark Shell Command Injection Vulnerabil...

Exploit for OS Command Injection in Apache Spark

CVE-2022-33891 Apache Spark Shell Command Injection Vulnerabil...

awsglue-local (>=0.9.1, <=1.0.2), ceja (0.1.0) +13 more potentially affected by CVE-2022-33891 via pyspark (2.4.8)

pyspark PYPI version 2.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - awsglue-local =0.9.1, =0.2.1, =0.0.12, =0.1.0, =0.1.0, =1.3.1, =2.0.0b0, =1.0.2rc1, =2.4.0rc1, =0.0.2, =0.2.0, =0.5.1 Source cves: CVE-2022-33891...

intake-hive (0.1.0), sparklanes (>=0.2.0, <=0.2.4) potentially affected by CVE-2022-33891 via pyspark (2.3.0)

pyspark PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - intake-hive 0.1.0 - sparklanes =0.2.0, =0.2.4 Source cves: CVE-2022-33891 Source advisory: OSV:GHSA-4X9R-J582-CGR8...

nuna-sql-tools (>=0.0.13, <=0.0.17), pydeequ (0.1.5) +1 more potentially affected by CVE-2022-33891 via pyspark (2.4.7)

pyspark PYPI version 2.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - nuna-sql-tools =0.0.13, =0.0.17 - pydeequ 0.1.5 - pyrasterframes 0.9.1 Source cves: CVE-2022-33891 Source advisory: OSV:GHSA-4X9R-J582-CGR8...

abi-ds-utils (>=0.1.2, <=0.1.9), abi-pyspark-utils (>=0.1.1, <=0.1.4) +68 more potentially affected by CVE-2022-33891 via pyspark (>=3.0.0, <=3.1.2)

pyspark PYPI version =3.0.0, =0.1.2, =0.1.1, =0.5.1, =1.0.0, =0.12.0.dev0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =1.0.0, =1.0.0, =1.0.1 - cehrbert 1.5.0 and more Source cves: CVE-2022-33891 Source advisory: OSV:GHSA-4X9R-J582-CGR8...