Package · Maven

org.apache.nifi:nifi-dbcp-base

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.8

CVE-2023-34468 Public exploit EPSS 62%

Apache NiFi: Potential Code Injection with Database Services using H2

The DBCPConnectionPool and HikariCPConnectionPool Controller Services in Apache NiFi 0.0.2 through 1.21.0 allow an authenticated and authorized user to configure a Database URL with the H2 driver that enables custom code execution. The resolution validates th…

Apache Software Foundation Apache NiFi org.apache.nifi:nifi-hikari-dbcp-service org.apache.nifi:nifi-dbcp-base Maven

Jun 12, 2023