Product · Apache Software Foundation

Apache NiFi Registry

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.8

CVE-2022-33140 Public exploit

Improper Neutralization of Command Elements in Shell User Group Provider

The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not neutralize arguments for group resolution commands, allowing injection of operating system commands on Linux and macOS platforms. The ShellUs…

Apache Software Foundation Apache NiFi Apache NiFi Registry org.apache.nifi:nifi Maven

Jun 15, 2022