Apache Spark Shell Command Injection (CVE-2022-33891) via Weblogs

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•20

Detects attempts to exploit an Apache Spark server via CVE-2022-33891, which is a shell command injection vulnerability, by looking for specific patterns in web server query strings.