Skip to content

PRP: Apche livy exposed ui#686

Open
joernNNN wants to merge 3 commits intogoogle:masterfrom
joernNNN:livy-exposed-ui
Open

PRP: Apche livy exposed ui#686
joernNNN wants to merge 3 commits intogoogle:masterfrom
joernNNN:livy-exposed-ui

Conversation

@joernNNN
Copy link
Contributor

@joernNNN joernNNN changed the title apche livy exposed ui, v1 PRP: Apche livy exposed ui Aug 13, 2025
@tooryx tooryx linked an issue Aug 19, 2025 that may be closed by this pull request
@robert-doyensec
Copy link
Collaborator

Hi @joernNNN , just a reminder that this is waiting for the testbed ( google/security-testbeds#154 (comment) ).

@robert-doyensec
Copy link
Collaborator

Hi @joernNNN , the plugin looks generally good, but I think we should use the /batches API endpoint for less false negatives, for example if the server doesn't have wget or python installed.
Could you please update it to perform a test like

curl -X POST http://livy-server:8998/batches \
  -H "Content-Type: application/json" \
  -d '{
        "file": "{{ T_CBS_URI }}"
      }'

Sorry for the inconvenience, and let me know if you see any issues with this approach.

@robert-doyensec robert-doyensec self-requested a review February 19, 2026 17:20
Copy link
Collaborator

@robert-doyensec robert-doyensec left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just one small change to disable debugging

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

PRP: Apache livy None RCE

3 participants