GHSA-JJJH-JJXP-WPFF vulnerabilities

Vulnerabilities for packages: cassandra, spark, management-api-for-apache-cassandra-4.1, scala, management-api-for-apache-cassandra-5.0, cassandra-reaper, management-api-for-apache-cassandra-4.0...

CVE-2022-42004 vulnerabilities

Vulnerabilities for packages: cassandra, management-api-for-apache-cassandra-5.0, scala, cassandra-reaper...

CVE-2022-42004 vulnerabilities

Vulnerabilities for packages: cassandra, spark, management-api-for-apache-cassandra-4.1, scala, hadoop-fips, management-api-for-apache-cassandra-5.0, cassandra-reaper, management-api-for-apache-cassandra-4.0...

CVE-2022-42003 vulnerabilities

Vulnerabilities for packages: cassandra, spark, management-api-for-apache-cassandra-4.1, scala, management-api-for-apache-cassandra-5.0, cassandra-reaper, management-api-for-apache-cassandra-4.0...

CVE-2022-42003 vulnerabilities

Vulnerabilities for packages: cassandra, management-api-for-apache-cassandra-5.0, scala, cassandra-reaper...

Apache NiFi Command Injection Vulnerability

Apache NiFi is a data processing and distribution system from the Apache Foundation, USA. The Apache NiFi Registry is one of the registries used to store and manage versioning processes. injection vulnerability. The vulnerability stems from the failure of the network system or product to properly...

OS Command Injection

Apache NiFi and Apache NiFi Registry are vulnerable to os command injection. The vulnerability exists because the ShellUserGroupProvider doesn't properly neutralizes group resolution command elements which allows an attacker to inject and execute arbitrary OS commands on Linux and MacOS platforms...

Code injection in Apache NiFi and NiFi Registry

The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not neutralize arguments for group resolution commands, allowing injection of operating system commands on Linux and macOS platforms. The ShellUserGroupProvider is not included in the...

GHSA-77HF-23PQ-2G7C Code injection in Apache NiFi and NiFi Registry

The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not neutralize arguments for group resolution commands, allowing injection of operating system commands on Linux and macOS platforms. The ShellUserGroupProvider is not included in the...

CVE-2022-33140

The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not neutralize arguments for group resolution commands, allowing injection of operating system commands on Linux and macOS platforms. The ShellUserGroupProvider is not included in the...

CVE-2022-33140

The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not neutralize arguments for group resolution commands, allowing injection of operating system commands on Linux and macOS platforms. The ShellUserGroupProvider is not included in the...

CVE-2022-33140

The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not neutralize arguments for group resolution commands, allowing injection of operating system commands on Linux and macOS platforms. The ShellUserGroupProvider is not included in the...

Command injection

The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not neutralize arguments for group resolution commands, allowing injection of operating system commands on Linux and macOS platforms. The ShellUserGroupProvider is not included in the...

CVE-2022-33140

The Red Hat, CIRCL, OSV, and other connected feeds confirm CVE-2022-33140 affects Apache NiFi (1.10.0–1.16.2) and Apache NiFi Registry (0.6.0–1.16.2). The root cause is that the optional ShellUserGroupProvider does not neutralize arguments for group resolution commands, allowing command injection...

CVE-2022-33140 Improper Neutralization of Command Elements in Shell User Group Provider

The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not neutralize arguments for group resolution commands, allowing injection of operating system commands on Linux and macOS platforms. The ShellUserGroupProvider is not included in the...

Apache NiFi 操作系统命令注入漏洞

Apache NiFi is a data processing and distribution system from the Apache Foundation, USA. The Apache NiFi Registry is one of the registries used to store and manage versioning processes. injection vulnerability. The vulnerability stems from the failure of the network system or product to properly...

GHSA-4WRC-F8PQ-FPQP vulnerabilities

Vulnerabilities for packages: apache-nifi...

GHSA-4WRC-F8PQ-FPQP vulnerabilities

Vulnerabilities for packages: geoserver...

GHSA-JVX9-RJ3W-JQ99 Origin Validation Error in Apache NiFi

Apache NiFi before 0.7.4 and 1.x before 1.3.0 need to establish the response header telling browsers to only allow framing with the same origin...

Origin Validation Error in Apache NiFi

Apache NiFi before 0.7.4 and 1.x before 1.3.0 need to establish the response header telling browsers to only allow framing with the same origin...