Maven/org.apache.spark:spark-core_2.11 CVE-2017-7678: medium 6.1, EPSS 3.38%
Moderate severity vulnerability that affects org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11
Action: Upgrade org.apache.spark:spark-core_2.11 to 2.2.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.0 | - |
Fixed versions
| 2.2.0 |
Sources
- osv: GHSA-r34r-f84j-5x4x
- https://nvd.nist.gov/vuln/detail/CVE-2017-7678
- https://github.com/advisories/GHSA-r34r-f84j-5x4x
- http://apache-spark-developers-list.1001551.n3.nabble.com/CVE-2017-7678-Apache-Spark-XSS-web-UI-MHTML-vulnerability-td21947.html
- http://www.securityfocus.com/bid/99603
CVE-2017-7678 · published · modified · JSON