asf__nifi_CVE-2023-36542_1-22-0

Apache NiFi ステータス リソース 連絡先 !Track Issueshttps://img.shields.io...

CVE-2023-36542 Apache NiFi: Potential Code Injection with Properties Referencing Remote Resources

Apache NiFi 0.0.2 through 1.22.0 include Processors and Controller Services that support HTTP URL references for retrieving drivers, which allows an authenticated and authorized user to configure a location that enables custom code execution. The resolution introduces a new Required Permission fo...

CVE-2023-36542

Apache NiFi versions 0.0.2 through 1.22.0 are vulnerable to a code injection flaw because certain Processors and Controller Services support HTTP URL references for retrieving drivers. An authenticated and authorized user can exploit this by configuring a location that enables custom code executi...