CVE-2024-23347 | Meta Spark Studio up to 175 Project package.json resource injection

A vulnerability, which was classified as critical, has been found in Meta Spark Studio up to 175. This issue affects some unknown processing of the file package.json of the component Project Handler. The manipulation leads to improper control of resource identifiers.

The identification of this vulnerability is CVE-2024-23347. The attack may be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.