Apache NiFi 代码问题漏洞

Apache NiFi is a data processing and distribution system from the Apache USA Foundation. The system is primarily used for data routing, transformation and system intermediary logic. An XML external entity injection vulnerability exists in Apache NiFi versions 1.2.0 through 1.19.1, which stems fro...

PT-2023-18714 · Apache · Apache Nifi

Name of the Vulnerable Software and Affected Versions: Apache NiFi versions 1.2.0 through 1.19.1 Description: The ExtractCCDAAttributes Processor in Apache NiFi does not restrict XML External Entity references, making flow configurations that include this processor vulnerable to malicious XML...

CVE-2022-41915 vulnerabilities

Vulnerabilities for packages: apache-nifi...

CVE-2022-41915 vulnerabilities

Vulnerabilities for packages: apache-nifi...

GHSA-HH82-3PMQ-7FRP vulnerabilities

Vulnerabilities for packages: apache-nifi...

GHSA-HH82-3PMQ-7FRP vulnerabilities

Vulnerabilities for packages: apache-nifi...

GHSA-FX2C-96VJ-985V vulnerabilities

Vulnerabilities for packages: apache-nifi...

CVE-2022-41881 vulnerabilities

Vulnerabilities for packages: apache-nifi...

GHSA-RGV9-Q543-RQG4 vulnerabilities

Vulnerabilities for packages: spark, management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.0, hadoop-fips, cassandra, scala, cassandra-reaper...

GHSA-JJJH-JJXP-WPFF vulnerabilities

Vulnerabilities for packages: scala, management-api-for-apache-cassandra-5.0, cassandra-reaper, cassandra...

GHSA-RGV9-Q543-RQG4 vulnerabilities

Vulnerabilities for packages: scala, management-api-for-apache-cassandra-5.0, cassandra-reaper, cassandra...

GHSA-JJJH-JJXP-WPFF vulnerabilities

Vulnerabilities for packages: spark, management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.0, cassandra, scala, cassandra-reaper...

CVE-2022-42004 vulnerabilities

Vulnerabilities for packages: spark, management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.0, hadoop-fips, cassandra, scala, cassandra-reaper...

CVE-2022-42004 vulnerabilities

Vulnerabilities for packages: scala, management-api-for-apache-cassandra-5.0, cassandra-reaper, cassandra...

CVE-2022-42003 vulnerabilities

Vulnerabilities for packages: scala, management-api-for-apache-cassandra-5.0, cassandra-reaper, cassandra...

CVE-2022-42003 vulnerabilities

Vulnerabilities for packages: spark, management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.0, cassandra, scala, cassandra-reaper...

Apache NiFi Command Injection Vulnerability

Apache NiFi is a data processing and distribution system from the Apache Foundation, USA. The Apache NiFi Registry is one of the registries used to store and manage versioning processes. injection vulnerability. The vulnerability stems from the failure of the network system or product to properly...

OS Command Injection

Apache NiFi and Apache NiFi Registry are vulnerable to os command injection. The vulnerability exists because the ShellUserGroupProvider doesn't properly neutralizes group resolution command elements which allows an attacker to inject and execute arbitrary OS commands on Linux and MacOS platforms...

GHSA-77HF-23PQ-2G7C Code injection in Apache NiFi and NiFi Registry

The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not neutralize arguments for group resolution commands, allowing injection of operating system commands on Linux and macOS platforms. The ShellUserGroupProvider is not included in the...

Code injection in Apache NiFi and NiFi Registry

The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not neutralize arguments for group resolution commands, allowing injection of operating system commands on Linux and macOS platforms. The ShellUserGroupProvider is not included in the...