Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Uniffle

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2025-68637

    Apache Uniffle: Insecure SSL Configuration in Uniffle HTTP Client

    The Uniffle HTTP client is configured to trust all SSL certificates and disables hostname verification by default. This insecure configuration exposes all REST API communication between the Uniffle CLI/client and the Uniffle Coordinator service to potential M…

    Apache Software Foundation Apache Uniffle