724 matches found
GHSA-PR98-23F8-JWXV vulnerabilities
Vulnerabilities for packages: cassandra, cassandra-reaper, dependency-track, management-api-for-apache-cassandra-4.1, sonar-scanner-cli, akhq, tez, ontop-fips, trino, ontop, cassandra-fips, kserve-modelmesh, sonarqube, apache-nifi, management-api-for-apache-cassandra-5.0, zookeeper-fips,...
CVE-2024-12801 vulnerabilities
Vulnerabilities for packages: cassandra, cassandra-reaper, dependency-track, management-api-for-apache-cassandra-4.1, sonar-scanner-cli, akhq, tez, ontop-fips, trino, ontop, cassandra-fips, kserve-modelmesh, sonarqube, apache-nifi, management-api-for-apache-cassandra-5.0, zookeeper-fips,...
CVE-2024-12801 vulnerabilities
Vulnerabilities for packages: sonarqube, apache-nifi, sonar-scanner-cli, thingsboard, akhq, cassandra-reaper, kserve-modelmesh, trino, management-api-for-apache-cassandra-5.0, tez, dependency-track, cassandra, sonarqube-10...
CVE-2024-12798 vulnerabilities
Vulnerabilities for packages: cassandra, cassandra-reaper, dependency-track, management-api-for-apache-cassandra-4.1, sonar-scanner-cli, akhq, tez, ontop-fips, trino, ontop, cassandra-fips, kserve-modelmesh, sonarqube, apache-nifi, management-api-for-apache-cassandra-5.0, zookeeper-fips,...
CVE-2024-12798 vulnerabilities
Vulnerabilities for packages: sonarqube, apache-nifi, sonar-scanner-cli, thingsboard, akhq, cassandra-reaper, kserve-modelmesh, trino, management-api-for-apache-cassandra-5.0, tez, dependency-track, cassandra, sonarqube-10...
GHSA-MQVR-2RP8-J7H4 vulnerabilities
Vulnerabilities for packages: apache-nifi...
CVE-2024-38829 vulnerabilities
Vulnerabilities for packages: apache-nifi...
CVE-2024-52067
Apache NiFi 1.16.0 through 1.28.0 and 2.0.0-M1 through 2.0.0-M4 include optional debug logging of Parameter Context values during the flow synchronization process. An authorized administrator with access to change logging levels could enable debug logging for framework flow synchronization, causi...
CVE-2024-52067 Apache NiFi: Potential Insertion of Sensitive Parameter Values in Debug Log
Apache NiFi 1.16.0 through 1.28.0 and 2.0.0-M1 through 2.0.0-M4 include optional debug logging of Parameter Context values during the flow synchronization process. An authorized administrator with access to change logging levels could enable debug logging for framework flow synchronization, causi...
CVE-2024-52067 Apache NiFi: Potential Insertion of Sensitive Parameter Values in Debug Log
Apache NiFi 1.16.0 through 1.28.0 and 2.0.0-M1 through 2.0.0-M4 include optional debug logging of Parameter Context values during the flow synchronization process. An authorized administrator with access to change logging levels could enable debug logging for framework flow synchronization, causi...
CVE-2024-52067 Apache NiFi: Potential Insertion of Sensitive Parameter Values in Debug Log
Apache NiFi 1.16.0 through 1.28.0 and 2.0.0-M1 through 2.0.0-M4 include optional debug logging of Parameter Context values during the flow synchronization process. An authorized administrator with access to change logging levels could enable debug logging for framework flow synchronization, causi...
CVE-2024-52067
CVE-2024-52067 affects Apache NiFi 1.16.0–1.28.0 and 2.0.0-M1–2.0.0-M4. The issue is optional debug logging of Parameter Context values during flow synchronization, which an authorized admin could enable to write parameter names and values to logs. Deployments with the default Logback config do n...
Apache NiFi 日志信息泄露漏洞
Apache NiFi is a data processing and distribution system from the Apache USA Foundation. The system is primarily used for data routing, transformation, and system brokering logic. A log information disclosure vulnerability exists in Apache NiFi versions 1.16.0 to 1.28.0 and 2.0.0-M1 to 2.0.0-M4,...
GHSA-2X2G-32R7-P4X8 vulnerabilities
Vulnerabilities for packages: logstash, druid, strimzi-kafka-operator, apache-nifi, prometheus-jmx-exporter, thingsboard...
CVE-2024-31141 vulnerabilities
Vulnerabilities for packages: logstash, druid, strimzi-kafka-operator, apache-nifi, prometheus-jmx-exporter, thingsboard...
GHSA-7MQJ-XGF8-P59V Apache NiFi Cross-site Scripting vulnerability
Apache NiFi 1.10.0 through 1.27.0 and 2.0.0-M1 through 2.0.0-M3 support a description field for Parameters in a Parameter Context configuration that is vulnerable to cross-site scripting. An authenticated user, authorized to configure a Parameter Context, can enter arbitrary JavaScript code, whic...
Apache NiFi Cross-site Scripting vulnerability
Apache NiFi 1.10.0 through 1.27.0 and 2.0.0-M1 through 2.0.0-M3 support a description field for Parameters in a Parameter Context configuration that is vulnerable to cross-site scripting. An authenticated user, authorized to configure a Parameter Context, can enter arbitrary JavaScript code, whic...
CVE-2024-45477
Apache NiFi 1.10.0 through 1.27.0 and 2.0.0-M1 through 2.0.0-M3 support a description field for Parameters in a Parameter Context configuration that is vulnerable to cross-site scripting. An authenticated user, authorized to configure a Parameter Context, can enter arbitrary JavaScript code, whic...
CVE-2024-45477 Apache NiFi: Improper Neutralization of Input in Parameter Description
Apache NiFi 1.10.0 through 1.27.0 and 2.0.0-M1 through 2.0.0-M3 support a description field for Parameters in a Parameter Context configuration that is vulnerable to cross-site scripting. An authenticated user, authorized to configure a Parameter Context, can enter arbitrary JavaScript code, whic...
CVE-2024-45477 Apache NiFi: Improper Neutralization of Input in Parameter Description
Apache NiFi 1.10.0 through 1.27.0 and 2.0.0-M1 through 2.0.0-M3 support a description field for Parameters in a Parameter Context configuration that is vulnerable to cross-site scripting. An authenticated user, authorized to configure a Parameter Context, can enter arbitrary JavaScript code, whic...