一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

一、漏洞信息

漏洞编号：[CVE-2022-31777](https://nvd.nist.gov/vuln/detail/CVE-2022-31777)

漏洞归属组件：[spark](https://gitee.com/src-openeuler/spark)

漏洞归属的版本：3.2.0,3.2.2

CVSS V3.0分值：

BaseScore：5.4 Medium

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

漏洞简述：

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

漏洞公开时间：2022-11-02 00:15:00

漏洞创建时间：2022-12-26 10:57:55

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2022-31777

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

其它

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

5.4

Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(3.2.2):

2.openEuler-20.03-LTS-SP3(3.2.0):

3.openEuler-22.03-LTS(3.2.2):

4.openEuler-22.03-LTS-SP1(3.2.2):