Skip to content
OpenAdvisories

Package · Maven

org.apache.nifi:nifi-framework-core

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.9
    CVE-2024-52067

    Apache NiFi: Potential Insertion of Sensitive Parameter Values in Debug Log

    Apache NiFi 1.16.0 through 1.28.0 and 2.0.0-M1 through 2.0.0-M4 include optional debug logging of Parameter Context values during the flow synchronization process. An authorized administrator with access to change logging levels could enable debug logging for…

    Apache Software Foundation Apache NiFi org.apache.nifi:nifi-framework-core Maven
  • High 7.5
    CVE-2020-1942

    Insertion of Sensitive Information into Log File in Apache NiFi

    In Apache NiFi 0.0.1 to 1.11.0, the flow fingerprint factory generated flow fingerprints which included sensitive property descriptor values. In the event a node attempted to join a cluster and the cluster flow was not inheritable, the flow fingerprint of bot…

    org.apache.nifi:nifi-framework-core org.apache.nifi:nifi-security-utils Maven