Archive

29 July 2023

Vulnerabilities first published on this day (UTC), newest first.

← June 2023 2023 / July /29 August 2023 →

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 8.8

CVE-2023-36542 Public exploit

Apache NiFi: Potential Code Injection with Properties Referencing Remote Resources

Apache NiFi 0.0.2 through 1.22.0 include Processors and Controller Services that support HTTP URL references for retrieving drivers, which allows an authenticated and authorized user to configure a location that enables custom code execution. The resolution i…

Apache Software Foundation Apache NiFi org.apache.nifi:nifi-jms-processors org.apache.nifi:nifi-hikari-dbcp-service Maven

Jul 29, 2023