Executive brief
Improper Input Validation in Apache Spark
Affected products
- Maven org.apache.spark:spark-core_2.10
- Maven org.apache.spark:spark-core_2.11
Junglewise Threat Intelligence
CVE-2018-11804: Improper Input Validation in Apache Spark
CVE-2018-11804 · Severity: low · CVSS 3.1 · Published 2022-05-14
Technologies: org.apache.spark:spark-core_2.10 (Maven), org.apache.spark:spark-core_2.11 (Maven). Vendors: Maven.
Related threats
- PYSEC-2019-114 - Prior to Spark 2.3.3, in certain situations Spark would write user data to local disk unencrypted, even if spark.io.encryption.enabled=true.
- Remote Code Execution in spark-core
- Moderate severity vulnerability that affects org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11
- org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11 Improper Authentication vulnerability
- PYSEC-2017-147 - In Apache Spark 1.6.0 until 2.1.1, the launcher API performs unsafe deserialization of data received by its socket. This makes applications