Threaticon
Toggle sidebar

You're viewing a limited, public preview. Log in for full access.

Log in User Guide
Log in Get started
Vulnerabilities CVE-2022-33891

CVE-2022-33891

Medium
Open
KEV
TLP:CLEAR

Apache Spark Command Injection Vulnerability

AI Analysis

No AI analysis yet.

Description

Apache — Spark — Apache Spark contains a command injection vulnerability via Spark User Interface (UI) when Access Control Lists (ACLs) are enabled.

Details

EPSS Score
93.08%

99.8th percentile

Confidence
100%
CISA KEV
Date Added
Mar 7, 2023
Patch Due
Mar 28, 2023
Required Action
Apply updates per vendor instructions.
No notes yet. Click "Add Note" to create the first analysis note.
No opinions yet. Be the first to assess this intelligence.
Leaving Threaticon

This link opens an external site that isn't part of the platform.