Skip to content
OpenAdvisories

Archive

12 June 2023

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2023-34212 Public exploit

    Apache NiFi: Potential Deserialization of Untrusted Data with JNDI in JMS Components

    The JndiJmsConnectionFactoryProvider Controller Service, along with the ConsumeJMS and PublishJMS Processors, in Apache NiFi 1.8.0 through 1.21.0 allow an authenticated and authorized user to configure URL and library properties that enable deserialization of…