Логотип exploitDog
bind:CVE-2022-31777
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2022-31777

Количество 4

Количество 4

redhat логотип

CVE-2022-31777

больше 3 лет назад

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

CVSS3: 5.4
EPSS: Низкий
nvd логотип

CVE-2022-31777

больше 3 лет назад

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

CVSS3: 5.4
EPSS: Низкий
debian логотип

CVE-2022-31777

больше 3 лет назад

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2. ...

CVSS3: 5.4
EPSS: Низкий
github логотип

GHSA-43xg-8wmj-cw8h

больше 3 лет назад

Apache Spark vulnerable to Log Injection

CVSS3: 5.4
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
redhat логотип
CVE-2022-31777

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

CVSS3: 5.4
0%
Низкий
больше 3 лет назад
nvd логотип
CVE-2022-31777

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

CVSS3: 5.4
0%
Низкий
больше 3 лет назад
debian логотип
CVE-2022-31777

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2. ...

CVSS3: 5.4
0%
Низкий
больше 3 лет назад
github логотип
GHSA-43xg-8wmj-cw8h

Apache Spark vulnerable to Log Injection

CVSS3: 5.4
0%
Низкий
больше 3 лет назад

Уязвимостей на страницу