EUVD-2018-0548

Malware in sbrugna...

Directory traversal

Directory traversal vulnerability in Spark 2.5 allows remote attackers to read arbitrary files via a .. dot dot in the URI...

CVE-2016-9177

CVE-2016-9177 affects Spark 2.5 (path traversal vulnerability in static file serving). The root cause is directory traversal protection not preventing a .. in the URI, allowing an attacker to read arbitrary server files. Documented impact includes potential exposure of sensitive data. Mitigation ...

CVE-2016-9177

Directory traversal vulnerability in Spark 2.5 allows remote attackers to read arbitrary files via a .. dot dot in the URI...