CVE-2016-9177 PUBLISHED

Reported by mitre · Published November 4, 2016

Directory traversal vulnerability in Spark 2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.

Affected Products

VendorProductVersions
n/an/an/a
n/an/an/a, n/a
Mavencom.sparkjava:spark-core0, 0

Timeline

References

Open in Interactive Console →