writeups.xyz / Remote Code Execution by Abusing Apache Spark SQL

Submitter : c2a

Date: 24 October 2022

Bounty : undisclosed

Vulnerabilities :

• SQL Injection
• RCE

Programs :

• Undisclosed

Authors :

• Colin McQueen

Link :
https://blog.stratumsecurity.com/2022/10/24/abusing-apache-spark-sql-to-get-code-execution/