Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache NiFi

47 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.1
    CVE-2024-56512 Public exploit

    Apache NiFi: Missing Complete Authorization for Parameter and Service References

    Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers, when creating new Process Groups. Creating a new Process Group can include binding to …

    Apache Software Foundation Apache NiFi org.apache.nifi:nifi-web-api Maven