721 matches found
Deserialization Of Untrusted Data
org.apache.nifi, nifi-asana-processors is vulnerable to Deserialization Of Untrusted Data. The vulnerability is due to the use of unfiltered Java object serialization and deserialization in the GetAsanaObject Processor, which allows an attacker with access to the configured cache server to supply...
GHSA-CRJG-W57M-RQQF vulnerabilities
Vulnerabilities for packages: druid...
CVE-2025-22235 vulnerabilities
Vulnerabilities for packages: keycloak-config-cli...
GHSA-MMWX-RJ87-VFGR vulnerabilities
Vulnerabilities for packages: druid...
GHSA-RC42-6C7J-7H5R vulnerabilities
Vulnerabilities for packages: keycloak-config-cli...
CVE-2025-14763 vulnerabilities
Vulnerabilities for packages: apache-nifi...
GHSA-X44P-GVRJ-PJ2R vulnerabilities
Vulnerabilities for packages: apache-nifi...
CVE-2025-14763 vulnerabilities
Vulnerabilities for packages: apache-nifi...
GHSA-X44P-GVRJ-PJ2R vulnerabilities
Vulnerabilities for packages: apache-nifi...
GHSA-V4P2-2W39-MHRJ Apache NiFi GetAsanaObject Processor has Remote Code Execution via Unsafe Deserialization
Apache NiFi 1.20.0 through 2.6.0 include the GetAsanaObject Processor, which requires integration with a configurable Distribute Map Cache Client Service for storing and retrieving state information. The GetAsanaObject Processor used generic Java Object serialization and deserialization without...
CVE-2025-66524 Apache NiFi: Deserialization of Untrusted Data in GetAsanaObject Processor
Apache NiFi 1.20.0 through 2.6.0 include the GetAsanaObject Processor, which requires integration with a configurable Distribute Map Cache Client Service for storing and retrieving state information. The GetAsanaObject Processor used generic Java Object serialization and deserialization without...
CVE-2025-66524 Apache NiFi: Deserialization of Untrusted Data in GetAsanaObject Processor
Apache NiFi 1.20.0 through 2.6.0 include the GetAsanaObject Processor, which requires integration with a configurable Distribute Map Cache Client Service for storing and retrieving state information. The GetAsanaObject Processor used generic Java Object serialization and deserialization without...
CVE-2025-66524
The vulnerability concerns Apache NiFi GetAsanaObject Processor (NiFi 1.20.0–2.6.0) which uses unfiltered Java Object serialization/deserialization with a Distribute Map Cache Client Service for state. The root cause is unsafe deserialization of crafted state data stored in the configured cache s...
PT-2025-52439
Name of the Vulnerable Software and Affected Versions Apache NiFi versions 1.20.0 through 2.6.0 Description The GetAsanaObject Processor in Apache NiFi utilizes a Distribute Map Cache Client Service for state management. This processor employs Java Object serialization and deserialization without...
Apache NiFi 代码问题漏洞
Apache NiFi is a data processing and distribution system from the Apache USA Foundation. The system is primarily used for data routing, transformation, and system brokering logic. A code issue vulnerability exists in Apache NiFi versions 1.20.0 through 2.6.0 that stems from the GetAsanaObject...
EUVD-2018-0792
Malware in sbrugna...
EUVD-2018-0797
Malware in sbrugna...
EUVD-2021-19906
Malware in sbrugna...