[ https://issues.apache.org/jira/browse/SPARK-24542?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Apache Spark reassigned SPARK-24542: ------------------------------------ Assignee: Apache Spark (was: Xiao Li) > Hive UDF series UDFXPathXXXX allow users to pass carefully crafted XML to > access arbitrary files > ------------------------------------------------------------------------------------------------ > > Key: SPARK-24542 > URL: https://issues.apache.org/jira/browse/SPARK-24542 > Project: Spark > Issue Type: New Feature > Components: SQL > Affects Versions: 2.0.2, 2.1.2, 2.2.1, 2.3.1 > Reporter: Xiao Li > Assignee: Apache Spark > Priority: Major > > Hive UDF series UDFXPathXXXX allow users to pass carefully crafted XML to > access arbitrary files. Spark does not have built-in access control. When > users use the external access control library, users might bypass them and > access the file contents. -- This message was sent by Atlassian JIRA (v7.6.3#76005) --------------------------------------------------------------------- To unsubscribe, e-mail: issues-unsubscr...@spark.apache.org For additional commands, e-mail: issues-h...@spark.apache.org