CVE-2022-33891 1

CVE-2022-33891: Apache Spark Command Injection Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Mar 07, 2023

Apache Spark contains a command injection vulnerability via Spark User Interface (UI) when Access Control Lists (ACLs) are enabled.

Vulnerabilities & Patching