Exploit for #VU65380 OS Command Injection in Apache Spark

Vulnerability identifier: #VU65380

Vulnerability risk: Medium

CVSSv4.0: 7.7 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/U:Green]

CVE-ID: CVE-2022-33891

CWE-ID: CWE-78

Exploitation vector: Network

Exploits in database: 9

• February 23, 2024
  • CVE-2022-33891-EXPLOIT (A PoC exploit for CVE-2022-33891 - Apache Spark UI Remote Code Execution (RCE)) [Github]
• September 7, 2022
  • Apache Spark Unauthenticated Command Injection RCE [Metasploit]
• August 14, 2022
  • CVE-2022-33891 (CVE-2022-33891 Exploit For Apache Spark) [Github]
• August 1, 2022
  • CVE-2022-33891 (「?」CVE-2022-33891 - Apache Spark Command Injection) [Github]
• July 24, 2022
  • cve-2022-33891 (Apache Spark RCE) [Github]
• July 21, 2022
  • cve-2022-33891 () [Github]
• July 20, 2022
  • cve-2022-33891 (Apache Spark Shell Command Injection Vulnerability) [Github]
  • CVE-2022-33891 (Apache Spark Command Injection PoC Exploit for CVE-2022-33891) [Github]
• July 18, 2022
  • cve-2022-33891 (cve-2022-33891-poc) [Github]

Vulnerable software:
Apache Spark
Server applications / Frameworks for developing and running applications

Vendor: Apache Foundation