Junglewise Threat Intelligence

CVE-2023-36542: Apache NiFi Code Injection vulnerability

CVE-2023-36542 · Severity: low · CVSS 3.1 · Published 2023-07-29

Technologies: org.apache.nifi:nifi-standard-processors (Maven), org.apache.nifi:nifi-jms-processors (Maven). Vendors: Maven.

Executive brief

Apache NiFi Code Injection vulnerability

Affected products

  • Maven org.apache.nifi:nifi-standard-processors
  • Maven org.apache.nifi:nifi-hbase_2-client-service
  • Maven org.apache.nifi:nifi-record-serialization-services
  • Maven org.apache.nifi:nifi-jms-processors
  • Maven org.apache.nifi:nifi-dbcp-service
  • Maven org.apache.nifi:nifi-cdc-mysql-bundle
  • Maven org.apache.nifi:nifi-hadoop-dbcp-service
  • Maven org.apache.nifi:nifi-hikari-dbcp-service

Related threats