~ / search / GHSA-fvxv-9xxr-h7wj

GHSA-fvxv-9xxr-h7wj

Pyspark User Impersonation Vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2018-11760

Packages

EcosystemPackageAffectedFixed in
PyPI pyspark >= 2.3.0, < 2.3.2 2.3.2
PyPI pyspark >= 1.0.2, < 2.2.3 2.2.3

Details

As written in the advisory (Markdown source, shown as plain text).

When using PySpark , it's possible for a different local user to connect to the Spark application and impersonate the user running the Spark application. This affects versions 1.x, 2.0.x, 2.1.x, 2.2.0 to 2.2.2, and 2.3.0 to 2.3.1.

References

External links from the advisory. They lead to third-party sites.