CVE-2018-9159
31.03.2018, 21:29
In Spark before 2.7.2, a remote attacker can read unintended static files via various representations of absolute or relative pathnames, as demonstrated by file: URLs and directory traversal sequences. NOTE: this product is unrelated to Ignite Realtime Spark.
| Vendor | Product | Version |
|---|---|---|
| sparkjava | spark | 𝑥 < 2.7.2 |
𝑥
= Vulnerable software versions
References