Exploited Vulnerabilities Daily
🌐 English

Home › Apache

CVE-2022-33891: Apache Spark

EPSS93.2%No. 408 of 1739 in KEV
CVE year2022~1 yrs before listing
Same vendor in KEV41
Same product1
FieldValue
VendorApache
ProductSpark
NameApache Spark Command Injection Vulnerability
Added to KEV2023-03-07
US federal due date2023-03-28
Ransomware useUnknown
CWECWE-78

CISA description

Apache Spark contains a command injection vulnerability via Spark User Interface (UI) when Access Control Lists (ACLs) are enabled.

NVD — CVE-2022-33891

Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page

A Apache Spark vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2023-03-07.