Apache NiFi JMS Deserialization issue

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2018-1310 · ADVISORY
• nifi.apache.org/security.html · WEB

Lỗ hổng khác của org.apache.nifi:nifi

• CVE-2022-33140CAO 8.8The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not neutralize arguments f…
• CVE-2022-29265CAO 7.5Multiple components in Apache NiFi 0.0.1 to 1.16.0 do not restrict XML External Entity references in the default configuration. The Standard…
• CVE-2021-44145TRUNG BÌNH 6.5In the TransformXML processor of Apache NiFi before 1.15.1 an authenticated user could configure an XSLT file which, if it included maliciou…
• CVE-2020-9491CAO 7.5In Apache NiFi 1.2.0 to 1.11.4, the NiFi UI and API were protected by mandating TLS v1.2, as well as listening connections established by pr…
• CVE-2020-9487CAO 7.5In Apache NiFi 1.0.0 to 1.11.4, the NiFi download token (one-time password) mechanism used a fixed cache size and did not authenticate a req…