Package · Maven

org.apache.nifi:nifi-jms-processors

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

Medium 6.5

CVE-2023-40037 Public exploit

Apache NiFi: Incomplete Validation of JDBC and JNDI Connection URLs

Apache NiFi 1.21.0 through 1.23.0 support JDBC and JNDI JMS access in several Processors and Controller Services with connection URL validation that does not provide sufficient protection against crafted inputs. An authenticated and authorized user can bypass…

Apache Software Foundation Apache NiFi org.apache.nifi:nifi-jms-processors org.apache.nifi:nifi-dbcp-base Maven

Aug 18, 2023
High 8.8

CVE-2023-36542 Public exploit

Apache NiFi: Potential Code Injection with Properties Referencing Remote Resources

Apache NiFi 0.0.2 through 1.22.0 include Processors and Controller Services that support HTTP URL references for retrieving drivers, which allows an authenticated and authorized user to configure a location that enables custom code execution. The resolution i…

Apache Software Foundation Apache NiFi org.apache.nifi:nifi-jms-processors org.apache.nifi:nifi-hikari-dbcp-service Maven

Jul 29, 2023
Medium 6.5

CVE-2023-34212 Public exploit

Apache NiFi: Potential Deserialization of Untrusted Data with JNDI in JMS Components

The JndiJmsConnectionFactoryProvider Controller Service, along with the ConsumeJMS and PublishJMS Processors, in Apache NiFi 1.8.0 through 1.21.0 allow an authenticated and authorized user to configure URL and library properties that enable deserialization of…

Apache Software Foundation Apache NiFi org.apache.nifi:nifi-jms-processors Maven

Jun 12, 2023