TI-2018-06657 CVE-2018-9159 · GHSA-76qr-mmh8-cp8f
In Spark before 2.7.2, a remote attacker can read unintended static files via various…
Priority LOW 31
In Spark before 2.7.2, a remote attacker can read unintended static files via various representations of absolute or relative pathnames, as demonstrated by file: URLs and directory traversal sequences.