Security Advisory

CVE-2022-42009

8
HIGH

Vulnerability Description

SpringEL injection in the server agent in Apache Ambari version 2.7.0 to 2.7.6 allows a malicious authenticated user to execute arbitrary code remotely. Users are recommended to upgrade to 2.7.7.
Published Date July 12, 2023
Official Source NIST NVD Advisory