2 matches found
GHSA-43XG-8WMJ-CW8H Apache Spark vulnerable to Log Injection
A stored cross-site scripting XSS vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI...
5.4CVSS7.1AI score0.01526EPSS
SaveExploits0References7
Cross site scripting
A stored cross-site scripting XSS vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI...
4.9CVSS5.5AI score0.01526EPSS
SaveExploits0References2Affected Software1
20