CVE-2016-9177

HIGH 7.5EPSS 5.1%

Directory traversal vulnerability in Spark 2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.

CVSS v3.0: 7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v3.0: 7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0: 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS: 5.07% chance of exploitation in the next 30 days, 92th percentile
Published: 2016-11-04
Updated: 2024-08-06

Proof-of-concept exploits (1)

shoucheng3/perwendel__spark_CVE-2016-9177_2-5-10★ · 2025-08-17

References

Related