{"action":"Upgrade pyspark to 2.4.6 or later.","affected":[{"fixed":"2.4.6","introduced":"0"}],"component":"pyspark","cve_ids":["CVE-2020-9480"],"ecosystem":"PyPI","epss":0.2937,"exploited":false,"fixed_versions":["2.4.6"],"ghsa_id":"GHSA-wgx7-jwwm-cgjv","id":"tcs_01M5KG26QQKH4S94SSPM8XRJSG","modified_at":"2024-10-15T16:40:37.173246Z","published_at":"2022-02-10T23:05:20Z","references":["https://osv.dev/vulnerability/GHSA-wgx7-jwwm-cgjv","https://nvd.nist.gov/vuln/detail/CVE-2020-9480","https://github.com/pypa/advisory-database/tree/main/vulns/pyspark/PYSEC-2020-95.yaml","https://lists.apache.org/thread.html/r03ad9fe7c07d6039fba9f2152d345274473cb0af3d8a4794a6645f4b@%3Cuser.spark.apache.org%3E","https://lists.apache.org/thread.html/ra0e62a18ad080c4ce6df5e0202a27eaada75222761efc3f7238b5a3b@%3Ccommits.doris.apache.org%3E","https://lists.apache.org/thread.html/rb3956440747e41940d552d377d50b144b60085e7ff727adb0e575d8d@%3Ccommits.submarine.apache.org%3E","https://lists.apache.org/thread.html/ree9e87aae81852330290a478692e36ea6db47a52a694545c7d66e3e2@%3Cdev.spark.apache.org%3E","https://spark.apache.org/security.html#CVE-2020-9480","https://www.oracle.com/security-alerts/cpuApr2021.html"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-wgx7-jwwm-cgjv","url":"https://osv.dev/vulnerability/GHSA-wgx7-jwwm-cgjv"}],"summary":"Improper Authentication in Apache Spark"}