- Vendor / Project
- Apache
- Product
- Spark
- Date added
- Mar 7, 2023
- Due date
- Mar 28, 2023
- Known ransomware use
- Unknown
- CWEs
- CWE-78
Description
Apache Spark contains a command injection vulnerability via Spark User Interface (UI) when Access Control Lists (ACLs) are enabled.
Required action
Apply updates per vendor instructions.