Vendors / Sparkjava Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Sparkjava records in CISA KEV No Sparkjava vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 41
Directory traversal vulnerability in Spark 2.5 allows remote attackers to read arbitrary files via a ..
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.05074 · Published 2016-11-04 · Partial fix · 2.5.2 CWE-22
Priority LOW 31
In Spark before 2.7.2, a remote attacker can read unintended static files via various representations of absolute or relative pathnames, as demonstrated by file: URLs and directory traversal sequences.
CVSS 3.0 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.04445 · Published 2018-03-31 · Partial fix · 2.7.2 CWE-22
Open these records in search → All records by CVSS severity
0 1 1 0 0
