PT-2026-84664 · Apache · Spark History Server
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Spark History Server versions prior to 3.5.8
Description
Insufficient XSS escaping allows a malicious Spark job to generate arbitrary unescaped frontend code. This can lead to a minimal privilege escalation within the browser. Exploitation requires the attacker to have permissions to launch a Spark job and to trick a user with higher privileges into visiting the Spark history web page.
Recommendations
Upgrade to Spark 3.5.8 or later.
Exploit
Fix
LPE
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Spark History Server