EUVD-2018-0794

Malware in sbrugna...

CVE-2018-17195

The template upload API endpoint accepted requests from different domain when sent in conjunction with ARP spoofing + man in the middle MiTM attack, resulting in a CSRF attack. The required attack vector is complex, requiring a scenario with client certificate authentication, same subnet access,...

PT-2018-13946

Name of the Vulnerable Software and Affected Versions Apache NiFi versions prior to 1.8.0 Description The template upload API endpoint is susceptible to a CSRF attack when combined with ARP spoofing and a man-in-the-middle MiTM attack. This complex attack vector requires client certificate...