Apache NiFi DBCPConnectionPool HikariCPConnectionPool Code Execution

The vulnerability of the DBCPConnectionPool and HikariCPConnectionPool control servers of the Apache NiFi data processing platform is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2023-5586

Name of the Vulnerable Software and Affected Versions Apache NiFi versions 0.0.2 through 1.21.0 Description The issue in Apache NiFi is related to the DBCPConnectionPool and HikariCPConnectionPool Controller Services, which allow an authenticated and authorized user to configure a Database URL wi...