Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
cve-2022-33891-fix — Educational lab demonstrating CVE-2022-33891 exploitation and patch application for Apache Spark with ACL authentication, including PoC verification and recompilation steps. | Kitploit
Tools/GitHubGitHub/elsvital/cve-2022-33891-fix
Vulnerability AnalysisExploitationWeb SecurityPenetration TestingLearning & EducationLabs & Practice
GitHubelsvital/cve-2022-33891-fix

cve-2022-33891-fix

Educational lab demonstrating CVE-2022-33891 exploitation and patch application for Apache Spark with ACL authentication, including PoC verification and recompilation steps.

View Repository
12 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

EP3 - MAC0352 Redes deComputadores e Sistemas Distribuidos 2023

Tópico: CVE-2022-33891

Execução de comandos shell arbitrários em aplicação spark que utiliza autenticação via ACL

Alunos

  • Elinilson Vital
  • Leoarndo Bozzetto

CVE-2022-33891 Patch Instructions for Ubuntu 22.04

Prerequisites

  • Ubuntu 22.04
  • Git
  • Maven
  • Python 3

Steps to Apply the Patch

  1. Clone the fix repository:
root@kitploit:~
git clone https://github.com/elsvital/cve-2022-33891-fix.git
  1. Change to the Spark directory without the patch:
root@kitploit:~
cd spark-3.2.0-no-patch
  1. Compile Spark without the patch:
root@kitploit:~
sudo ./build/mvn -DskipTests clean package
  1. Start the Spark service:
root@kitploit:~
sudo ./sbin/start-master.sh
  1. Clone the vulnerability verification POC repository:
root@kitploit:~
git clone https://github.com/HuskyHacks/cve-2022-33891
  1. Navigate to the POC source directory:
root@kitploit:~
cd cve-2022-33891
  1. Verify the vulnerability:
root@kitploit:~
python3 poc.py -u http://localhost -p 8080 --check --verbose
  1. Return to the main directory:
root@kitploit:~
cd ..
  1. Stop the Spark service:
root@kitploit:~
sudo ./sbin/stop-master.sh
  1. Apply the patch from the provided link or merge the changes into your local repository.
root@kitploit:~
# Access: https://github.com/apache/spark/commit/1d524a88f6e93e9971a09f70eb2804dca51d578c
  1. Recompile Spark with the patch applied:
root@kitploit:~
sudo ./build/mvn -DskipTests clean package
  1. Start the Spark service again:
root@kitploit:~
sudo ./sbin/start-master.sh
  1. Navigate back to the POC source directory:
root@kitploit:~
cd cve-2022-33891
  1. Confirm the vulnerability is patched:
root@kitploit:~
python3 poc.py -u http://localhost -p 8080 --check --verbose

Video Tutorial

For a video walkthrough of the patching process, watch the tutorial at: Watch the video

Additional Notes

Replace http://localhost with the appropriate IP address or hostname of your Spark service if necessary.

Download Tool