漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Apache Livy: Restrict file access
Vulnerability Description
Malicious configuration can lead to unauthorized file access in Apache Livy. This issue affects Apache Livy 0.7.0 and 0.8.0 when connecting to Apache Spark 3.1 or later. A request that includes a Spark configuration value supported from Apache Spark version 3.1 can lead to users gaining access to files they do not have permissions to. For the vulnerability to be exploitable, the user needs to have access to Apache Livy's REST or JDBC interface and be able to send requests with arbitrary Spark configuration values. Users are recommended to upgrade to version 0.9.0 or later, which fixes the issue.
CVSS Information
N/A
Vulnerability Type
输入验证不恰当
Vulnerability Title
Apache Livy 输入验证错误漏洞
Vulnerability Description
Apache Livy是美国阿帕奇（Apache）基金会的一个应用服务器。提供支持从Web、移动应用程序以编程方式，容错，多租户提交Spark作业。 Apache Livy 0.7.0版本和0.8.0版本存在输入验证错误漏洞，该漏洞源于恶意配置可能导致未经授权的文件访问，当连接到Apache Spark 3.1或更高版本时，用户可能获得对其无权访问文件的访问权限。
CVSS Information
N/A
Vulnerability Type
N/A