CVE-2023-50379

—

CVSS 3.1

8.8 high

EPSS

1%p63

Published

Feb 27, 2024 (Feb 27, 2024)

Modified

Jun 17, 2026

Description

Malicious code injection in Apache Ambari in prior to 2.7.8. Users are recommended to upgrade to version 2.7.8, which fixes this issue. Impact: A Cluster Operator can manipulate the request by adding a malicious code injection and gain a root over the cluster main host.

Vendors: apache
Products: ambari
Weakness: CWE-94
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.