724 matches found
GHSA-RGV9-Q543-RQG4 vulnerabilities
Vulnerabilities for packages: cassandra, cassandra-reaper, scala, management-api-for-apache-cassandra-4.0, management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-5.0, spark, hadoop-fips...
CVE-2022-42003 vulnerabilities
Vulnerabilities for packages: cassandra, cassandra-reaper, scala, management-api-for-apache-cassandra-4.0, management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-5.0, spark...
CVE-2022-42004 vulnerabilities
Vulnerabilities for packages: cassandra, cassandra-reaper, scala, management-api-for-apache-cassandra-4.0, management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-5.0, spark, hadoop-fips...
CVE-2022-42003 vulnerabilities
Vulnerabilities for packages: scala, cassandra, cassandra-reaper, management-api-for-apache-cassandra-5.0...
CVE-2022-42004 vulnerabilities
Vulnerabilities for packages: scala, cassandra, cassandra-reaper, management-api-for-apache-cassandra-5.0...
Apache NiFi Command Injection Vulnerability
Apache NiFi is a data processing and distribution system from the Apache Foundation, USA. The Apache NiFi Registry is one of the registries used to store and manage versioning processes. injection vulnerability. The vulnerability stems from the failure of the network system or product to properly...
OS Command Injection
Apache NiFi and Apache NiFi Registry are vulnerable to os command injection. The vulnerability exists because the ShellUserGroupProvider doesn't properly neutralizes group resolution command elements which allows an attacker to inject and execute arbitrary OS commands on Linux and MacOS platforms...
GHSA-77HF-23PQ-2G7C Code injection in Apache NiFi and NiFi Registry
The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not neutralize arguments for group resolution commands, allowing injection of operating system commands on Linux and macOS platforms. The ShellUserGroupProvider is not included in the...
Code injection in Apache NiFi and NiFi Registry
The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not neutralize arguments for group resolution commands, allowing injection of operating system commands on Linux and macOS platforms. The ShellUserGroupProvider is not included in the...
CVE-2022-33140
The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not neutralize arguments for group resolution commands, allowing injection of operating system commands on Linux and macOS platforms. The ShellUserGroupProvider is not included in the...
CVE-2022-33140
The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not neutralize arguments for group resolution commands, allowing injection of operating system commands on Linux and macOS platforms. The ShellUserGroupProvider is not included in the...
CVE-2022-33140
The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not neutralize arguments for group resolution commands, allowing injection of operating system commands on Linux and macOS platforms. The ShellUserGroupProvider is not included in the...
Command injection
The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not neutralize arguments for group resolution commands, allowing injection of operating system commands on Linux and macOS platforms. The ShellUserGroupProvider is not included in the...
CVE-2022-33140 Improper Neutralization of Command Elements in Shell User Group Provider
The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not neutralize arguments for group resolution commands, allowing injection of operating system commands on Linux and macOS platforms. The ShellUserGroupProvider is not included in the...
CVE-2022-33140
The Red Hat, CIRCL, OSV, and other connected feeds confirm CVE-2022-33140 affects Apache NiFi (1.10.0–1.16.2) and Apache NiFi Registry (0.6.0–1.16.2). The root cause is that the optional ShellUserGroupProvider does not neutralize arguments for group resolution commands, allowing command injection...
Apache NiFi 操作系统命令注入漏洞
Apache NiFi is a data processing and distribution system from the Apache Foundation, USA. The Apache NiFi Registry is one of the registries used to store and manage versioning processes. injection vulnerability. The vulnerability stems from the failure of the network system or product to properly...
GHSA-4WRC-F8PQ-FPQP vulnerabilities
Vulnerabilities for packages: geoserver...
GHSA-4WRC-F8PQ-FPQP vulnerabilities
Vulnerabilities for packages: apache-nifi...
Cross-site Scripting in Apache NiFi
In Apache NiFi before 0.7.4 and 1.x before 1.3.0, there are certain user input components in the UI which had been guarding for some forms of XSS issues but were insufficient...
GHSA-M5R7-W9V3-GHMX Cross-site Scripting in Apache NiFi
In Apache NiFi before 0.7.4 and 1.x before 1.3.0, there are certain user input components in the UI which had been guarding for some forms of XSS issues but were insufficient...