There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - ** UNSUPPORTED WHEN ASSIGNED ** The Apache Spark UI offers the possibility to enable ACLs via the
    configuration option spark.acls.enable. With an authentication filter, this checks whether a user has
    access permissions to view or modify the application. If ACLs are enabled, a code path in
    HttpSecurityFilter can allow someone to perform impersonation by providing an arbitrary user name. A
    malicious user might then be able to reach a permission check function that will ultimately build a Unix
    shell command based on their input, and execute it. This will result in arbitrary shell command execution
    as the user Spark is currently running as. This issue was disclosed earlier as CVE-2022-33891, but
    incorrectly claimed version 3.1.3 (which has since gone EOL) would not be affected. NOTE: This
    vulnerability only affects products that are no longer supported by the maintainer. Users are recommended
    to upgrade to a supported version of Apache Spark, such as version 3.4.0. (CVE-2023-32007)

Apache Spark 中存在远程代码执行漏洞。Apache Star UI 允许通过配置选项 flash.acls.enable 启用 ACL。ACL 可借助身份验证过滤器，检查用户是否具有查看或修改应用程序的访问权限。如果启用了 ACL，HttpSecurityFilter 中的代码路径可允许用户通过提供任意用户名来发动假冒攻击。然后，恶意用户可能会接触到权限检查函数，该函数最终会根据他们的输入构建并执行 Unix shell 命令。这将导致可以当前运行 Spark 的用户身份执行任意 shell 命令。这会影响 Apache Spark 版本 3.0.3 和更早版本、版本 3.1.1 至 3.1.3，以及版本 3.2.0 至 3.2.1。

请注意， 3.1.3 最初被声明为不易受攻击，但此情况已在 CVE-2023-32007 中更新。

Apache Spark 中存在遠端程式碼執行弱點。在 Apache Spark UI 中可以透過組態選項 spark.acls.enable 啟用 ACL。透過驗證篩選器，這項功能可以檢查使用者是否具有檢視或修改應用程式的存取權限。如果啟用 ACL，則 HttpSecurityFilter 中的程式碼路徑可允許使用者透過提供任意使用者名稱來執行模擬。然後，惡意使用者可能會接觸到權限檢查函式，而該函式最終會根據惡意使用者的輸入構建 Unix shell 命令，並執行該命令。這會引致惡意使用者以目前執行 Spark 的使用者的身分執行任意 shell 命令。此弱點可影響 Apache Spark 3.0.3 版和更舊版本、3.1.1 至 3.1.3 版以及 3.2.0 至 3.2.1 版。

請注意，3.1.3 原本宣告為無弱點，但 CVE-2023-32007 中已更新這一點。

Apache Spark にリモートコード実行の脆弱性が存在します。Apache Spark UI は、構成オプションの spark.acls.enable で ACL を有効にする可能性を提供します。これは、認証フィルターを使用して、ユーザーがアプリケーションを表示または変更するためのアクセス許可を持っているかどうかをチェックします。ACL が有効な場合、HttpSecurityFilter のコードパスにより、任意のユーザー名を提供することで、なりすましを実行できる可能性があります。悪意のあるユーザーがアクセス許可チェック機能に到達し、最終的に自分の入力に基づいて Unix シェルコマンドを構築し、実行する可能性があります。これにより、ユーザー Spark が現在実行されているときに任意のシェルコマンドが実行されます。これは、Apache Spark バージョン 3.0.3 以前、バージョン 3.1.1 〜 3.1.3、およびバージョン 3.2.0 ～ 3.2.1 に影響します。

注意: 3.1.3 はもともと脆弱ではないと宣言されていましたが、これは CVE-2023-32007で更新されました。

A remote code execution vulnerability exists in Apache Spark. The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in HttpSecurityFilter can allow someone to perform impersonation by providing an arbitrary user name. A malicious user might then be able to reach a permission check function that will ultimately build a Unix shell command based on their input, and execute it. This will result in arbitrary shell command execution as the user Spark is currently running as. This affects Apache Spark versions 3.0.3 and earlier, versions 3.1.1 through 3.1.3, and versions 3.2.0 to 3.2.1.

Note that 3.1.3 was originally declared not to be vulnerable but this was updated in CVE-2023-32007.

A remote code execution vulnerability exists in Apache Spark. The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in HttpSecurityFilter can allow someone to perform impersonation by providing an arbitrary user name. A malicious user might then be able to reach a permission check function that will ultimately build a Unix shell command based on their input, and execute it. This will result in arbitrary shell command execution as the user Spark is currently running as. This affects Apache Spark versions 3.0.3 and earlier, versions 3.1.1 to 3.1.3, and versions 3.2.0 to 3.2.1.

Note that 3.1.3 was originally declared not to be vulnerable but this was updated in CVE-2023-32007.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
410733	SCA: security update for org.apache.spark:spark-parent_2.12, pyspark (GHSA-59hw-j9g6-mfg3)	Tenable Self-Hosted Container Security	SCA Checks	2025/1/23	2026/7/2	high
410733	SCA: security update for org.apache.spark:spark-parent_2.12, pyspark (GHSA-59hw-j9g6-mfg3)	Tenable Cloud Security	SCA Checks	2025/1/23	2026/7/2	high
173429	Apache Spark <= 3.0.3 / 3.1.x > 3.1.1 / 3.2.x < 3.2.1 RCE (CVE-2022-33891)	Nessus	Misc.	2023/3/27	2025/5/14	high
172446	Apache Spark <= 3.0.3 / 3.1.1 < 3.1.3 / 3.2.x < 3.2.1 RCE (CVE-2022-33891)	Nessus	Misc.	2023/3/10	2026/7/29	high
172446	Apache Spark <= 3.0.3 / 3.1.1 < 3.1.3 / 3.2.x < 3.2.1 RCE (CVE-2022-33891)	Nessus	Misc.	2023/3/10	2026/7/29	high
173429	Apache Spark <= 3.0.3 / 3.1.x > 3.1.1 / 3.2.x < 3.2.1 RCE (CVE-2022-33891)	Nessus	Misc.	2023/3/27	2025/5/14	high
172446	Apache Spark <= 3.0.3 / 3.1.1 < 3.1.3 / 3.2.x < 3.2.1 RCE (CVE-2022-33891)	Nessus	Misc.	2023/3/10	2026/7/29	high
173429	Apache Spark <= 3.0.3 / 3.1.x > 3.1.1 / 3.2.x < 3.2.1 RCE (CVE-2022-33891)	Nessus	Misc.	2023/3/27	2025/5/14	high
173429	Apache Spark <= 3.0.3 / 3.1.x > 3.1.1 / 3.2.x < 3.2.1 RCE (CVE-2022-33891)	Nessus	Misc.	2023/3/27	2025/5/14	high
172446	Apache Spark <= 3.0.3 / 3.1.1 < 3.1.3 / 3.2.x < 3.2.1 RCE (CVE-2022-33891)	Nessus	Misc.	2023/3/10	2026/7/29	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high