Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 47
Reset filtersApache NiFi allows read-only users to submit component configuration verification request
Apache NiFi: Missing authorization when replacing Process Groups with restricted components
Apache NiFi fails to validate proxy host headers when constructing qualified URLs
Apache NiFi is missing the Restricted annotation with the Execute Code Required Permission
Apache NiFi: Missing Authorization of Restricted Permissions for Component Updates
Apache NiFi GetAsanaObject Processor has Remote Code Execution via Unsafe Deserialization
Apache NiFi: Potential Insertion of MongoDB Password in Provenance Record
Apache NiFi: Potential Insertion of Sensitive Parameter Values in Debug Log
Apache NiFi: Missing Complete Authorization for Parameter and Service References
Apache NiFi Cross-site Scripting vulnerability
Apache NiFi vulnerable to Cross-site Scripting
Improper Neutralization of Input in Advanced User Interface for Jolt
Apache NiFi Insufficient Property Validation vulnerability
Apache NiFi Code Injection vulnerability
Apache NiFi vulnerable to Code Injection
Apache NiFi vulnerable to Deserialization of Untrusted Data
XML External Entity Reference in Apache NiFi
Insufficiently Protected Credentials via Insecure Temporary File in org.apache.nifi:nifi-single-user-utils
Code injection in Apache NiFi and NiFi Registry
Origin Validation Error in Apache NiFi
Cross-site Scripting in Apache NiFi
XML External Entity Reference in Apache NiFi
Injection in Apache NiFi
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.