{"action":"Upgrade pyspark to 2.2.3 or later.","affected":[{"fixed":"2.3.2","introduced":"2.3.0"},{"fixed":"2.2.3","introduced":"1.0.2"}],"component":"pyspark","cve_ids":["CVE-2018-11760"],"ecosystem":"PyPI","epss":0.00605,"exploited":false,"fixed_versions":["2.3.2","2.2.3"],"ghsa_id":"GHSA-fvxv-9xxr-h7wj","id":"tcs_01M5KFG7638TZVXJJZJTWXTHD2","modified_at":"2024-12-04T05:31:59.907142Z","published_at":"2019-02-07T18:02:21Z","references":["https://osv.dev/vulnerability/GHSA-fvxv-9xxr-h7wj","https://nvd.nist.gov/vuln/detail/CVE-2018-11760","https://github.com/advisories/GHSA-fvxv-9xxr-h7wj","https://github.com/apache/spark","https://github.com/pypa/advisory-database/tree/main/vulns/pyspark/PYSEC-2019-169.yaml","https://lists.apache.org/thread.html/6d015e56b3a3da968f86e0b6acc69f17ecc16b499389e12d8255bf6e@%3Ccommits.spark.apache.org%3E","https://lists.apache.org/thread.html/a86ee93d07b6f61b82b61a28049aed311f5cc9420d26cc95f1a9de7b@%3Cuser.spark.apache.org%3E","https://web.archive.org/web/20200227091119/http://www.securityfocus.com/bid/106786","https://web.archive.org/web/20200925111106/https://issues.apache.org/jira/browse/SPARK-26802"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-fvxv-9xxr-h7wj","url":"https://osv.dev/vulnerability/GHSA-fvxv-9xxr-h7wj"}],"summary":"Pyspark User Impersonation Vulnerability"}