shoucheng3/perwendel__spark_CVE-2018-9159_2_7_2_fixed

PoC

view exploit source poc_in_githubauthor shoucheng3published 2025-09-06catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2018-9159US	medium5.3	4.45% (91st)	Exploit	2018-03-31
In Spark before 2.7.2, a remote attacker can read unintended static files via various representations of absolute or relative pathnames, as demonstrated by file: URLs and directory…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.