Sparkjava

sparkjava

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Spark

spark

2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-9159 1Sparkjava 1Spark Jun 17, 2026 Mar 31, 2018 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 In Spark before 2.7.2, a remote attacker can read unintended static files via various representations of absolute or relative pathnames, as demonstrated by file: URLs and directory traversal sequences. NOTE: this product...Show more In Spark before 2.7.2, a remote attacker can read unintended static files via various representations of absolute or relative pathnames, as demonstrated by file: URLs and directory traversal sequences. NOTE: this product is unrelated to Ignite Realtime Spark.Show less
CVE-2016-9177 1Sparkjava 1Spark May 6, 2026 Nov 4, 2016 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Directory traversal vulnerability in Spark 2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2018-9159

1Sparkjava

1Spark

Jun 17, 2026

Mar 31, 2018

N/A· v4

5.3 MEDIUM· v3

5.0 MEDIUM· v2

In Spark before 2.7.2, a remote attacker can read unintended static files via various representations of absolute or relative pathnames, as demonstrated by file: URLs and directory traversal sequences. NOTE: this product...Show more

CVE-2016-9177

1Sparkjava

1Spark

May 6, 2026

Nov 4, 2016

N/A· v4

7.5 HIGH· v3

5.0 MEDIUM· v2

Directory traversal vulnerability in Spark 2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.