Description
Apache Spark contains a command injection vulnerability via Spark User Interface (UI) when Access Control Lists (ACLs) are enabled.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Apache Spark | Apache Software Foundation / Apache Spark | >= 3.0.3 and earlier, <= 3.0.3 | affected |
| Apache Spark | Apache Software Foundation / Apache Spark | >= 3.1.1 to 3.1.2, <= 3.1.2 | affected |
| Apache Spark | Apache Software Foundation / Apache Spark | >= 3.2.0 to 3.2.1, <= 3.2.1 | affected |