CVE-2017-12632

CVE-2017-12632 affects Apache NiFi and relates to a host header handling issue. A malicious Host header in an incoming HTTP request could cause NiFi to load resources from an external server. The vulnerability is mitigated by sanitizing host headers and comparing them against a controlled whiteli...