GHSA-HH82-3PMQ-7FRP vulnerabilities

Vulnerabilities for packages: apache-nifi...

GHSA-HH82-3PMQ-7FRP vulnerabilities

Vulnerabilities for packages: apache-nifi...

GHSA-FX2C-96VJ-985V vulnerabilities

Vulnerabilities for packages: apache-nifi...

CVE-2022-41881 vulnerabilities

Vulnerabilities for packages: apache-nifi...

GHSA-JJJH-JJXP-WPFF vulnerabilities

Vulnerabilities for packages: scala, cassandra, management-api-for-apache-cassandra-5.0, cassandra-reaper...

GHSA-RGV9-Q543-RQG4 vulnerabilities

Vulnerabilities for packages: scala, cassandra, management-api-for-apache-cassandra-5.0, cassandra-reaper...

GHSA-JJJH-JJXP-WPFF vulnerabilities

Vulnerabilities for packages: cassandra-reaper, management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-5.0, spark, scala, management-api-for-apache-cassandra-4.0, cassandra...

GHSA-RGV9-Q543-RQG4 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-5.0, spark, scala, management-api-for-apache-cassandra-4.0, cassandra, hadoop-fips...

CVE-2022-42003 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-5.0, spark, scala, management-api-for-apache-cassandra-4.0, cassandra...

CVE-2022-42004 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-5.0, spark, scala, management-api-for-apache-cassandra-4.0, cassandra, hadoop-fips...

CVE-2022-42004 vulnerabilities

Vulnerabilities for packages: scala, cassandra, management-api-for-apache-cassandra-5.0, cassandra-reaper...

CVE-2022-42003 vulnerabilities

Vulnerabilities for packages: scala, cassandra, management-api-for-apache-cassandra-5.0, cassandra-reaper...

Apache NiFi Command Injection Vulnerability

Apache NiFi is a data processing and distribution system from the Apache Foundation, USA. The Apache NiFi Registry is one of the registries used to store and manage versioning processes. injection vulnerability. The vulnerability stems from the failure of the network system or product to properly...

OS Command Injection

Apache NiFi and Apache NiFi Registry are vulnerable to os command injection. The vulnerability exists because the ShellUserGroupProvider doesn't properly neutralizes group resolution command elements which allows an attacker to inject and execute arbitrary OS commands on Linux and MacOS platforms...

GHSA-77HF-23PQ-2G7C Code injection in Apache NiFi and NiFi Registry

The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not neutralize arguments for group resolution commands, allowing injection of operating system commands on Linux and macOS platforms. The ShellUserGroupProvider is not included in the...

Code injection in Apache NiFi and NiFi Registry

The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not neutralize arguments for group resolution commands, allowing injection of operating system commands on Linux and macOS platforms. The ShellUserGroupProvider is not included in the...

CVE-2022-33140

The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not neutralize arguments for group resolution commands, allowing injection of operating system commands on Linux and macOS platforms. The ShellUserGroupProvider is not included in the...

CVE-2022-33140

The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not neutralize arguments for group resolution commands, allowing injection of operating system commands on Linux and macOS platforms. The ShellUserGroupProvider is not included in the...

CVE-2022-33140

The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not neutralize arguments for group resolution commands, allowing injection of operating system commands on Linux and macOS platforms. The ShellUserGroupProvider is not included in the...

Command injection

The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not neutralize arguments for group resolution commands, allowing injection of operating system commands on Linux and macOS platforms. The ShellUserGroupProvider is not included in the...