{"cvss":0.0,"datePublished":"2023-03-07","dateUpdated":"2023-03-07","description":"Apache Spark contains a command injection vulnerability via Spark User Interface (UI) when Access Control Lists (ACLs) are enabled.","dueDate":"2023-03-28","id":"CVE-2022-33891","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://lists.apache.org/thread/p847l3kopoo5bjtmxrcwk21xp6tjxqlc;  https://nvd.nist.gov/vuln/detail/CVE-2022-33891","product":"Spark","requiredAction":"Apply updates per vendor instructions.","severity":"HIGH","source":"cisa_known_exploited","title":"Apache Spark Command Injection Vulnerability","vendor":"Apache"}