The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.ac…

In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty…

** UNSUPPORTED WHEN ASSIGNED ** The Apache Spark UI offers the possibility to enable ACLs via t…

From version 1.3.0 onward, Apache Spark's standalone master exposes a REST API for job submissi…

In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to …

A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entit…

HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied …

In all versions of Apache Spark, its standalone resource manager accepts code to execute on a '…

In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0…

Spark's Apache Maven-based build includes a convenience script, 'build/mvn', that downloads and…

In Apache Spark 2.1.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, it's possible for a malicious user t…

This issue affects Apache Spark: before 3.5.7 and 4.0.1. Users are recommended to upgrade to ve…

In Apache Spark before 2.2.0, it is possible for an attacker to take advantage of a user's trus…

Apache Spark supports end-to-end encryption of RPC connections via "spark.authenticate" and "sp…

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0,…

Signing cookies is an application security feature that adds a digital signature to cookie data…

Prior to Spark 2.3.3, in certain situations Spark would write user data to local disk unencrypt…

In Apache Spark versions prior to 3.4.0, applications using spark-submit can specify a 'proxy-u…

In Apache Spark 1.6.0 until 2.1.1, the launcher API performs unsafe deserialization of data rec…

When using PySpark , it's possible for a different local user to connect to the Spark applicati…

In Apache Spark 1.0.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, when using PySpark or SparkR, it's p…

This issue affects Apache Spark versions before 3.4.4, 3.5.2 and 4.0.0. Apache Spark versio…

Уязвимость функции spark-submit фреймворка Apache Spark связана с недостатками механизма десери…

Уязвимость компонента Analytics Server программной платформы Oracle Business Intelligence Enter…

Уязвимость класса CookieSigner фреймворка Apache Spark и СУБД Apache Hive связана с раскрытием …

Уязвимость функции spark-submit фреймворка Apache Spark связана с небезопасным управлением прив…

Уязвимость интерфейса фреймворка Apache Spark связана с недостаточной проверкой аргументов, пер…

Уязвимость интерфейса PySpark фреймворка Apache Spark связана с недостатками разграничения дост…

Уязвимость фреймворка Apache Spark связана с недостатками процедуры аутентификации. Эксплуатаци…