Threats tagged 'ghsa-pvq3-8vp3-rhh8'

1 threat

Threats tagged 'ghsa-pvq3-8vp3-rhh8'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.8	EPSS 0.6%	CVE-2026-57866Apache Impala · Server-Side Request Forgery (SSRF) High8.8EPSS 0.6%2026-09-09GCVE DatabaseCVE-2026-57866 CVE-2026-57866 is a high-severity Server-Side Request Forgery (SSRF) vulnerability in Apache Impala versions 4.4.0 through 4.4.9 and 4.5.0 through 4.5.9. Authenticated users with permission to execute the ai_generate_text() function can exploit this flaw to exfiltrate secrets from credential providers configured in the hadoop.security.credential.provider.path property of core-site.xml, provided they know the secret's key. EPSS 0.6%Vulnerability Apache Software Foundation #ghsa-pvq3-8vp3-rhh8 #cwe-918	GCVE Database	2026-09-09

Showing 1–1 of 1 result