p PatchFirst

PatchFirst · Latest vulnerabilities

org.apache.spark:spark-core_2.9.3 vulnerabilities

Vulnerabilities published for org.apache.spark:spark-core_2.9.3 in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2022-31777

    Medium · CVSS 5.4EPSS 1.82%No fix published

    Apache Spark XSS vulnerability in log viewer UI Javascript

    A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

    org.apache.spark:spark-core_2.9.3
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →