In Spark before 2.7.2, a remote attacker can read unintended static files via various representations of absolute or relative pathnames, as demonstrated by file: URLs and directory traversal sequences. NOTE: this product is unrelated to Ignite Realtime Spark.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2018-03-31T21:00:00

Updated: 2024-08-05T07:17:51.328Z

Reserved: 2018-03-31T00:00:00

Link: CVE-2018-9159

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-03-31T21:29:00.373

Modified: 2024-11-21T04:15:06.177

Link: CVE-2018-9159

cve-icon Redhat

Severity : Moderate

Publid Date: 2018-03-06T00:00:00Z

Links: CVE-2018-9159 - Bugzilla