All CVE records
CVE-2022-33891 — Apache Spark Command Injection Vulnerability
CISA KEV listed
Added March 7, 2023 Remediate by March 28, 2023
Description
Apache Spark contains a command injection vulnerability via Spark User Interface (UI) when Access Control Lists (ACLs) are enabled.
Required action
Apply updates per vendor instructions.
Notes
https://lists.apache.org/thread/p847l3kopoo5bjtmxrcwk21xp6tjxqlc; https://nvd.nist.gov/vuln/detail/CVE-2022-33891
Need help remediating this vulnerability?
Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.