exploit/linux/http/spark_unauth_rce

weaponized

Apache Spark Unauthenticated Command Execution

view exploit source metasploittype exploitpublished 2017-12-12catalog metasploit
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2018-11770USmedium4.2Exploit
From version 1.3.0 onward, Apache Spark's standalone master exposes a REST API for job submission, in addition to the submission mechanism used by spark-submit. In standalone, the…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan