漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
Spark's Apache Maven-based build includes a convenience script, 'build/mvn', that downloads and runs a zinc server to speed up compilation. It has been included in release branches since 1.3.x, up to and including master. This server will accept connections from external hosts by default. A specially-crafted request to the zinc server could cause it to reveal information in files readable to the developer account running the build. Note that this issue does not affect end users of Spark, only developers building Spark from source code.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache Spark 输入验证错误漏洞
Vulnerability Description
Apache Spark是美国阿帕奇（Apache）软件基金会的一款支持非循环数据流和内存计算的大规模数据处理引擎。 Apache Spark 1.3.0及之后版本中存在输入验证错误漏洞。攻击者可通过向zinc服务器发送特制的请求利用该漏洞获取文件（限于运行该版本开发人员账户可读取的文件）中的信息。
CVSS Information
N/A
Vulnerability Type
N/A