PatchTheCVEsparkjava vulnerabilities
Recent CVEs affecting sparkjava products. 1 tracked.
sparkjava has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2018-03-31. Highest priority: CVE-2018-9159 (score 46/100).
- CVE-2018-9159 MEDIUM 5.3 UPGRADE In Spark before 2.7.2, a remote attacker can read unintended static files via various representations of absol
FAQ
How do I fix sparkjava vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sparkjava being exploited right now?
None of the tracked sparkjava CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sparkjava CVE should I patch first?
CVE-2018-9159 currently ranks highest (46/100): In Spark before 2.7.2, a remote attacker can read unintended static files via various representations of absol.