Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:25735
HistoryJun 23, 2020 - 1:03 a.m.

Remote Code Execution (RCE)

2020-06-2301:03:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16

EPSS

0.03

Percentile

90.9%

spark-network-common is vulnerable to remote code execution. The vulnerability exists it is possible to create a RPC request to start an application’s resources on the Spark cluster without the need of a shared key, allowing it to be leveraged for running shell commands.