Lucene search
Veracode Vulnerability DatabaseVERACODE:5752HistoryJan 26, 2018 - 4:42 a.m.
Java Deserialization
2018-01-2604:42:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.001 Low
EPSS
Percentile
22.9%
nifi-framework-core is vulnerable to Java deserialization. An authenticated user who has a valid client certificate can upload a template containing malicious code to cause a denial of service (DoS) conditions and potentially perform other attacks.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nifi-framework-core | le | 1.3.0 |
Related
osv
osv
Denial of service via deserialization attack in nifi
2019-10-25 19:42:50
CVE-2017-15703
2018-01-25 21:29:00
cve
cve
CVE-2017-15703
2018-01-25 21:29:00
prion
prion
Deserialization of untrusted data
2018-01-25 21:29:00
cvelist
cvelist
CVE-2017-15703
2017-10-02 00:00:00
nvd
nvd
CVE-2017-15703
2018-01-25 21:29:00
github
github
Denial of service via deserialization attack in nifi
2019-10-25 19:42:50