Vulnerability identifier: #VU65380

Vulnerability risk: Medium

CVSSv3.1: 7.2 [CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C]

CVE-ID: CVE-2022-33891

CWE-ID: CWE-78

Exploitation vector: Network

Exploits in database: 9

• February 23, 2024
  • CVE-2022-33891-EXPLOIT (A PoC exploit for CVE-2022-33891 - Apache Spark UI Remote Code Execution (RCE)) [Github]
• September 7, 2022
  • Apache Spark Unauthenticated Command Injection RCE [Metasploit]
• August 14, 2022
  • CVE-2022-33891 (CVE-2022-33891 Exploit For Apache Spark) [Github]
• August 1, 2022
  • CVE-2022-33891 (「?」CVE-2022-33891 - Apache Spark Command Injection) [Github]
• July 24, 2022
  • cve-2022-33891 (Apache Spark RCE) [Github]
• July 21, 2022
  • cve-2022-33891 () [Github]
• July 20, 2022
  • cve-2022-33891 (Apache Spark Shell Command Injection Vulnerability) [Github]
  • CVE-2022-33891 (Apache Spark Command Injection PoC Exploit for CVE-2022-33891) [Github]
• July 18, 2022
  • cve-2022-33891 (cve-2022-33891-poc) [Github]

Impact: Code execution

Vulnerable software:
Apache Spark
Server applications / Frameworks for developing and running applications

Vendor: Apache Foundation