Package · Maven

org.apache.nifi:nifi-framework-cluster-protocol

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.0

CVE-2017-15703

Denial of service via deserialization attack in nifi

Any authenticated user (valid client certificate but without ACL permissions) could upload a template which contained malicious code and caused a denial of service via Java deserialization attack. The fix to properly handle Java deserialization was applied on…

Apache Software Foundation Apache NiFi org.apache.nifi:nifi-framework-cluster-protocol Maven

Jan 25, 2018