Security Advisory

CVE-2022-45855

8
HIGH

Vulnerability Description

SpringEL injection in the metrics source in Apache Ambari version 2.7.0 to 2.7.6 allows a malicious authenticated user to execute arbitrary code remotely. Users are recommended to upgrade to 2.7.7.
Published Date July 12, 2023
Official Source NIST NVD Advisory