Yicheng

An issue exists that allows the exposure of sensitive information to an unauthorized actor through unauthorized SQL execution to the Spark SQL environment.

Improper authorization occurs during job information retrieval, allowing an attacker to gain access to unauthorized jobs belonging to other projects.