{"id":"CVE-2023-50379","aliases":["EUVD-2024-0717","GHSA-rghc-9fhx-h32m"],"status":"published","title":"Apache Ambari: authenticated users could perform command injection to perform RCE","description":"Malicious code injection in Apache Ambari in prior to 2.7.8. Users are recommended to upgrade to version 2.7.8, which fixes this issue.\n\nImpact:\nA Cluster Operator can manipulate the request by adding a malicious code injection and gain a root over the cluster main host.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.01064,"percentile":0.65087,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-94"],"published":"2024-02-27T08:27:03Z","modified":"2026-10-28T02:31:00Z","fixes":[{"ecosystem":"Maven","package":"org.apache.ambari.contrib.views:ambari-contrib-views","fixed_in":["2.7.8"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.apache.ambari.contrib.views:ambari-contrib-views","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.0"},{"fixed":"2.7.8"}]}]},{"source":"osv","ecosystem":"Maven","package":"org.apache.ambari.contrib.views:ambari-contrib-views","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.0"},{"fixed":"2.7.8"}]}]}],"products":[{"vendor":"apache","product":"ambari"},{"vendor":"apache software foundation","product":"apache ambari"}],"references":[{"url":"https://lists.apache.org/thread/jglww6h6ngxpo1r6r5fx7ff7z29lnvv8","tags":["vendor-advisory","x_transferred","Mailing List","Vendor Advisory","advisory","web"]},{"url":"http://www.openwall.com/lists/oss-security/2024/02/27/1","tags":["x_transferred","Mailing List","Third Party Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-50379","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-rghc-9fhx-h32m"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/50xxx/CVE-2023-50379.json","tags":["advisory"]},{"url":"https://github.com/apache/ambari","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2023-50379","title":"Apache Ambari: authenticated users could perform command injection to perform RCE","description":"Malicious code injection in Apache Ambari in prior to 2.7.8. Users are recommended to upgrade to version 2.7.8, which fixes this issue.\n\nImpact:\nA Cluster Operator can manipulate the request by adding a malicious code injection and gain a root over the cluster main host.","status":"published","published":"2024-02-27T08:27:03.12Z","modified":"2025-02-13T17:19:25.008Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:35:34.55015Z"}],"euvd":[{"id":"EUVD-2024-0717","description":"Malicious code injection in Apache Ambari in prior to 2.7.8. Users are recommended to upgrade to version 2.7.8, which fixes this issue.\n\nImpact:\nA Cluster Operator can manipulate the request by adding a malicious code injection and gain a root over the cluster main host.","status":"published","published":"2024-02-27T08:27:03Z","modified":"2025-02-13T17:19:25Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:03:48.029386Z"}],"ghsa":[{"id":"GHSA-rghc-9fhx-h32m","title":"Apache Ambari: authenticated users could perform command injection to perform RCE","description":"Malicious code injection in Apache Ambari in prior to 2.7.8. Users are recommended to upgrade to version 2.7.8, which fixes this issue.\n\nImpact:\nA Cluster Operator can manipulate the request by adding a malicious code injection and gain a root over the cluster main host.","status":"published","published":"2024-02-27T09:31:16Z","modified":"2026-03-14T05:09:21Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:39:36.642723Z"}],"nvd":[{"id":"CVE-2023-50379","description":"Malicious code injection in Apache Ambari in prior to 2.7.8. Users are recommended to upgrade to version 2.7.8, which fixes this issue.\n\nImpact:\nA Cluster Operator can manipulate the request by adding a malicious code injection and gain a root over the cluster main host.","status":"published","published":"2024-02-27T09:15:36.827Z","modified":"2026-06-17T06:39:34.58Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:09:07.077422Z"}],"osv":[{"id":"CVE-2023-50379","title":"Apache Ambari: authenticated users could perform command injection to perform RCE","description":"Malicious code injection in Apache Ambari in prior to 2.7.8. Users are recommended to upgrade to version 2.7.8, which fixes this issue.\n\nImpact:\nA Cluster Operator can manipulate the request by adding a malicious code injection and gain a root over the cluster main host.","status":"published","published":"2024-02-27T08:27:03.12Z","modified":"2026-10-28T02:31:00.098158416Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T15:44:35.245372Z"},{"id":"GHSA-rghc-9fhx-h32m","title":"Apache Ambari: authenticated users could perform command injection to perform RCE","description":"Malicious code injection in Apache Ambari in prior to 2.7.8. Users are recommended to upgrade to version 2.7.8, which fixes this issue.\n\nImpact:\nA Cluster Operator can manipulate the request by adding a malicious code injection and gain a root over the cluster main host.","status":"published","published":"2024-02-27T09:31:16Z","modified":"2025-02-13T19:10:36Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T15:46:55.877614Z"}]}}